File: //var/log/nginx/access.log
185.132.187.160 - - [13/Oct/2025:00:03:37 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
185.132.187.160 - - [13/Oct/2025:00:03:38 +0700] "" 400 0 "-" "-" "-"
104.23.175.25 - - [13/Oct/2025:00:04:46 +0700] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "181.116.40.154"
5.78.122.81 - - [13/Oct/2025:00:05:20 +0700] "GET /robots.txt HTTP/1.1" 502 157 "-" "Mozilla/5.0 (compatible; Sansec Security Monitor/1.0; +https://sansec.io/monitor)" "-"
5.78.122.81 - - [13/Oct/2025:00:05:20 +0700] "GET / HTTP/1.1" 502 157 "https://admin.fit-u.id/" "Mozilla/5.0 (compatible; Sansec Security Monitor/1.0; +https://sansec.io/monitor)" "-"
24.199.100.206 - - [13/Oct/2025:00:07:12 +0700] "GET /admin/config.php HTTP/1.0" 404 153 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" "-"
172.70.189.67 - - [13/Oct/2025:00:07:52 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
162.158.106.127 - - [13/Oct/2025:00:08:06 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
172.71.124.171 - - [13/Oct/2025:00:08:21 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
162.158.170.8 - - [13/Oct/2025:00:08:31 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
162.158.106.127 - - [13/Oct/2025:00:08:41 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
162.158.106.127 - - [13/Oct/2025:00:08:49 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
172.70.208.170 - - [13/Oct/2025:00:08:59 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
162.158.88.128 - - [13/Oct/2025:00:09:08 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
104.23.175.246 - - [13/Oct/2025:00:09:12 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "78.153.199.230"
162.158.88.106 - - [13/Oct/2025:00:09:47 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" "34.19.117.88"
103.28.12.163 - - [13/Oct/2025:00:13:04 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:00:13:05 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
71.6.134.234 - - [13/Oct/2025:00:14:19 +0700] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-"
78.153.140.149 - - [13/Oct/2025:00:14:33 +0700] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
78.153.140.149 - - [13/Oct/2025:00:14:33 +0700] "POST / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
204.76.203.18 - - [13/Oct/2025:00:16:11 +0700] "GET / HTTP/1.1" 404 153 "-" "-" "-"
172.71.152.36 - - [13/Oct/2025:00:17:43 +0700] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" "45.148.10.203"
172.68.164.51 - - [13/Oct/2025:00:18:07 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "45.148.10.203"
172.68.164.51 - - [13/Oct/2025:00:18:13 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "45.148.10.203"
162.158.106.229 - - [13/Oct/2025:00:18:16 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.130.110.130"
172.70.189.111 - - [13/Oct/2025:00:18:17 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "45.148.10.203"
162.158.163.122 - - [13/Oct/2025:00:18:23 +0700] "POST /qzkeyAdmin/ashx/FileHandler.ashx HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "137.175.57.11"
87.121.84.101 - - [13/Oct/2025:00:18:43 +0700] "GET / HTTP/1.0" 404 153 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" "-"
182.42.104.32 - - [13/Oct/2025:00:20:15 +0700] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
108.162.227.57 - - [13/Oct/2025:00:28:01 +0700] "GET / HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Debian; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "45.151.62.26"
176.97.210.9 - - [13/Oct/2025:00:30:45 +0700] "CONNECT postman-echo.com:443 HTTP/1.1" 400 157 "-" "-" "-"
172.69.165.29 - - [13/Oct/2025:00:31:24 +0700] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "62.210.123.69,49.149.121.27"
74.176.189.190 - - [13/Oct/2025:00:34:18 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:18 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:18 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:18 +0700] "GET /orm.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /gmo.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /akcc.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /nx.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /php.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /sx21_1.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /bluejackets.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:19 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /file17.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /pop.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /nx9.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /kwm4.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /ea3f.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /akp.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /xp.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:20 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /cwsd.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /1aa.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /litanies.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /asasx.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /just2.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /classwithtostring.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:21 +0700] "GET /j.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /g.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /ex.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /1.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /s.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /sx21_1.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /let.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:22 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /akcc.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /amphicyon.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /k.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /sec.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /xp.php HTTP/1.1" 502 157 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:00:34:23 +0700] "GET /ext.php HTTP/1.1" 502 157 "-" "-" "-"
172.68.242.16 - - [13/Oct/2025:00:35:26 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "35.94.29.99"
204.76.203.212 - - [13/Oct/2025:00:36:15 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
87.120.191.84 - - [13/Oct/2025:00:37:10 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
45.151.62.26 - - [13/Oct/2025:00:39:53 +0700] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "-"
103.28.12.163 - - [13/Oct/2025:00:43:20 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:00:43:20 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
172.70.147.198 - - [13/Oct/2025:00:43:42 +0700] "GET /style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.70.143.131 - - [13/Oct/2025:00:43:45 +0700] "GET /wp-content/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
108.162.226.76 - - [13/Oct/2025:00:43:47 +0700] "GET /wp-content/themes/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.69.176.21 - - [13/Oct/2025:00:43:49 +0700] "GET /wp-admin/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.68.164.153 - - [13/Oct/2025:00:43:50 +0700] "GET /wp-includes/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.70.208.80 - - [13/Oct/2025:00:43:51 +0700] "GET /chosen.php?p= HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
162.158.88.46 - - [13/Oct/2025:00:43:54 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
162.158.170.238 - - [13/Oct/2025:00:43:56 +0700] "GET /flower.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.70.208.80 - - [13/Oct/2025:00:43:58 +0700] "GET /gifclass.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.70.189.174 - - [13/Oct/2025:00:43:59 +0700] "GET /bless.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
162.158.108.87 - - [13/Oct/2025:00:44:02 +0700] "GET /class-t.api.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.70.189.174 - - [13/Oct/2025:00:44:04 +0700] "GET /blurbs.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "45.138.16.72"
172.70.188.17 - - [13/Oct/2025:00:50:04 +0700] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "167.94.146.51"
194.165.16.167 - - [13/Oct/2025:00:51:56 +0700] "\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 157 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:08 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:08 +0700] "GET /zxl.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:08 +0700] "GET /gdn.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:08 +0700] "GET /new4.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:08 +0700] "GET /des.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:08 +0700] "GET /jga.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:09 +0700] "GET /abcd.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:09 +0700] "GET /nc4.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:09 +0700] "GET /we.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:09 +0700] "GET /lock360.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:09 +0700] "GET /class.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:09 +0700] "GET /ar.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:10 +0700] "GET /file.php? HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:10 +0700] "GET /cache.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:10 +0700] "GET /buy.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:10 +0700] "GET /lv.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:10 +0700] "GET /cong.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:10 +0700] "GET /mpvloi.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:11 +0700] "GET /bs1.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:11 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:11 +0700] "GET /js.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:11 +0700] "GET /wso.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:11 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:11 +0700] "GET /admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:11 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:12 +0700] "GET /moon.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:12 +0700] "GET /simple.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:12 +0700] "GET /atomlib.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:12 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:12 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:12 +0700] "GET /radio.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:13 +0700] "GET /as.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:13 +0700] "GET /0.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:13 +0700] "GET /alfa.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:13 +0700] "GET /inputs.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:13 +0700] "GET /ty.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:13 +0700] "GET /wp.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:14 +0700] "GET /xx.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:14 +0700] "GET /rss.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:14 +0700] "GET /mar.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:14 +0700] "GET /tinny.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:14 +0700] "GET /themes.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:14 +0700] "GET /warm.PhP7 HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:16 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:16 +0700] "GET /jlex.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:16 +0700] "GET /c.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:16 +0700] "GET /v22.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:16 +0700] "GET /byp.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:16 +0700] "GET /chosen.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:17 +0700] "GET /elp.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:17 +0700] "GET /mini.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:17 +0700] "GET /lc.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:17 +0700] "GET /wp-22.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:17 +0700] "GET /up.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:17 +0700] "GET /atombil.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:18 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:18 +0700] "GET /NewFile.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:18 +0700] "GET /akc.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:18 +0700] "GET /manager.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:18 +0700] "GET /fm.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:18 +0700] "GET /css.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:18 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:19 +0700] "GET /rk2.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:19 +0700] "GET /classsmtps.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:19 +0700] "GET /members.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:19 +0700] "GET /v1.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:19 +0700] "GET /cool.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:19 +0700] "GET /dex.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:20 +0700] "GET /akcc.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:20 +0700] "GET /406.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:20 +0700] "GET /222.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:20 +0700] "GET /akk.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:20 +0700] "GET /file1.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:20 +0700] "GET /pass.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:21 +0700] "GET /asdf.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:21 +0700] "GET /prod/infos.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:21 +0700] "GET /ioxi-o.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:21 +0700] "GET /ant.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:21 +0700] "GET /123.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:21 +0700] "GET /wpc.php?p= HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:22 +0700] "GET /mlex.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:22 +0700] "GET /v2.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:22 +0700] "GET /v4.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:22 +0700] "GET /ws.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:22 +0700] "GET /132.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:22 +0700] "GET /321.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:23 +0700] "GET /ok.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:23 +0700] "GET /r.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:23 +0700] "GET /mlex.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:23 +0700] "GET /wi.php HTTP/1.1" 301 169 "-" "-" "-"
172.192.53.180 - - [13/Oct/2025:00:56:23 +0700] "GET /x2a.php56 HTTP/1.1" 301 169 "-" "-" "-"
46.246.3.185 - - [13/Oct/2025:00:58:19 +0700] "GET / HTTP/1.0" 301 169 "http://fit-u.id/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" "-"
46.246.3.185 - - [13/Oct/2025:00:58:21 +0700] "GET / HTTP/1.0" 502 559 "https://fit-u.id/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" "-"
108.162.226.84 - - [13/Oct/2025:00:58:39 +0700] "HEAD /news/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
172.69.176.13 - - [13/Oct/2025:00:58:40 +0700] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
104.23.175.167 - - [13/Oct/2025:00:58:42 +0700] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.86 Safari/537.36 Brave/1.62.162" "2600:3c02::2000:b4ff:fef7:fd59"
172.68.164.68 - - [13/Oct/2025:00:58:43 +0700] "HEAD /blog2/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "2600:3c02::2000:b4ff:fef7:fd59"
172.70.142.221 - - [13/Oct/2025:00:58:44 +0700] "HEAD /main/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.5414.120 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
172.68.164.68 - - [13/Oct/2025:00:58:45 +0700] "HEAD /site/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" "2600:3c02::2000:b4ff:fef7:fd59"
108.162.226.84 - - [13/Oct/2025:00:58:46 +0700] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" "2600:3c02::2000:b4ff:fef7:fd59"
172.70.188.186 - - [13/Oct/2025:00:58:48 +0700] "HEAD /cms/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" "2600:3c02::2000:b4ff:fef7:fd59"
172.68.164.68 - - [13/Oct/2025:00:58:49 +0700] "HEAD /web/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.86 Safari/537.36 Brave/1.62.162" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.163.122 - - [13/Oct/2025:00:58:50 +0700] "HEAD /en/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" "2600:3c02::2000:b4ff:fef7:fd59"
172.68.164.68 - - [13/Oct/2025:00:58:51 +0700] "HEAD /press/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.62 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
172.70.142.221 - - [13/Oct/2025:00:58:53 +0700] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.62 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.189.33 - - [13/Oct/2025:00:58:54 +0700] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.163.122 - - [13/Oct/2025:00:58:55 +0700] "HEAD /shop/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.56 Mobile Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.108.45 - - [13/Oct/2025:00:58:56 +0700] "HEAD /v2/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36 OPR/106.0.0.0" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.88.48 - - [13/Oct/2025:00:58:57 +0700] "HEAD /us/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6280.88 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
104.23.175.167 - - [13/Oct/2025:00:58:59 +0700] "HEAD /fr/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "2600:3c02::2000:b4ff:fef7:fd59"
172.70.142.221 - - [13/Oct/2025:00:59:00 +0700] "HEAD /2024/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.200 YaBrowser/24.1.0.0 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
104.23.175.167 - - [13/Oct/2025:00:59:01 +0700] "HEAD /de/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.170.63 - - [13/Oct/2025:00:59:03 +0700] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.108.45 - - [13/Oct/2025:00:59:04 +0700] "HEAD /home/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.106.78 - - [13/Oct/2025:00:59:06 +0700] "HEAD /store/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" "2600:3c02::2000:b4ff:fef7:fd59"
172.69.176.13 - - [13/Oct/2025:00:59:08 +0700] "HEAD /content/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 11; en-US; V2027) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/89.0.4389.116 UCBrowser/13.4.0.1306 Mobile Safari/537.36" "2600:3c02::2000:b4ff:fef7:fd59"
172.69.176.13 - - [13/Oct/2025:00:59:09 +0700] "HEAD /media/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; Nokia 2720 Flip) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.99 Mobile Safari/537.36 KAIOS/2.5" "2600:3c02::2000:b4ff:fef7:fd59"
172.71.82.78 - - [13/Oct/2025:00:59:10 +0700] "HEAD /portal/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "2600:3c02::2000:b4ff:fef7:fd59"
172.70.93.94 - - [13/Oct/2025:00:59:12 +0700] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edg/125.0.2535.51" "2600:3c02::2000:b4ff:fef7:fd59"
108.162.226.84 - - [13/Oct/2025:00:59:13 +0700] "HEAD /website/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 10; Nokia 2720 Flip) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.99 Mobile Safari/537.36 KAIOS/2.5" "2600:3c02::2000:b4ff:fef7:fd59"
162.158.189.33 - - [13/Oct/2025:00:59:14 +0700] "HEAD /2023/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "2600:3c02::2000:b4ff:fef7:fd59"
172.69.176.13 - - [13/Oct/2025:00:59:15 +0700] "HEAD /site1/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/124.0.6367.56 Mobile/15E148 Safari/604.1" "2600:3c02::2000:b4ff:fef7:fd59"
172.69.176.167 - - [13/Oct/2025:01:01:37 +0700] "GET / HTTP/1.1" 301 169 "http://arunaya.com" "msnbot/1.0 (+http://search.msn.com/msnbot.htm\xA1\xB1)" "123.249.76.228,14.128.63.112"
145.220.91.19 - - [13/Oct/2025:01:02:25 +0700] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" "-"
172.70.189.75 - - [13/Oct/2025:01:03:02 +0700] "GET /.env HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" "176.65.149.195"
172.70.143.167 - - [13/Oct/2025:01:03:02 +0700] "GET /.env HTTP/1.1" 404 2817 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" "176.65.149.195"
204.76.203.219 - - [13/Oct/2025:01:03:13 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
172.70.189.67 - - [13/Oct/2025:01:03:47 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "198.235.24.151"
87.120.191.90 - - [13/Oct/2025:01:03:52 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
172.70.208.171 - - [13/Oct/2025:01:04:33 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.92.162 - - [13/Oct/2025:01:04:33 +0700] "GET /zxl.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.92.162 - - [13/Oct/2025:01:04:33 +0700] "GET /gdn.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.106.127 - - [13/Oct/2025:01:04:33 +0700] "GET /new4.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.69.176.119 - - [13/Oct/2025:01:04:33 +0700] "GET /des.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.68.164.25 - - [13/Oct/2025:01:04:34 +0700] "GET /jga.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.71.81.171 - - [13/Oct/2025:01:04:34 +0700] "GET /abcd.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.108.114 - - [13/Oct/2025:01:04:34 +0700] "GET /nc4.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
108.162.226.146 - - [13/Oct/2025:01:04:34 +0700] "GET /we.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.106.127 - - [13/Oct/2025:01:04:34 +0700] "GET /lock360.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
108.162.226.146 - - [13/Oct/2025:01:04:34 +0700] "GET /class.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.88.128 - - [13/Oct/2025:01:04:35 +0700] "GET /ar.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.106.127 - - [13/Oct/2025:01:04:35 +0700] "GET /file.php? HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.170.9 - - [13/Oct/2025:01:04:35 +0700] "GET /cache.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.92.162 - - [13/Oct/2025:01:04:35 +0700] "GET /buy.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.108.114 - - [13/Oct/2025:01:04:35 +0700] "GET /lv.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.69.176.119 - - [13/Oct/2025:01:04:35 +0700] "GET /cong.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.88.106 - - [13/Oct/2025:01:04:36 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "34.19.117.88"
172.70.142.166 - - [13/Oct/2025:01:04:36 +0700] "GET /mpvloi.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.170.9 - - [13/Oct/2025:01:04:36 +0700] "GET /bs1.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.170.9 - - [13/Oct/2025:01:04:36 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
104.23.175.247 - - [13/Oct/2025:01:04:36 +0700] "GET /js.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.106.127 - - [13/Oct/2025:01:04:36 +0700] "GET /wso.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.189.67 - - [13/Oct/2025:01:04:36 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.69.176.119 - - [13/Oct/2025:01:04:37 +0700] "GET /admin.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.162.50 - - [13/Oct/2025:01:04:37 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.92.162 - - [13/Oct/2025:01:04:37 +0700] "GET /moon.php?p= HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.88.128 - - [13/Oct/2025:01:04:37 +0700] "GET /simple.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.71.81.171 - - [13/Oct/2025:01:04:37 +0700] "GET /atomlib.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.106.127 - - [13/Oct/2025:01:04:37 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.170.9 - - [13/Oct/2025:01:04:38 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.162.50 - - [13/Oct/2025:01:04:38 +0700] "GET /radio.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.69.166.39 - - [13/Oct/2025:01:04:38 +0700] "GET /as.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.106.127 - - [13/Oct/2025:01:04:38 +0700] "GET /0.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.162.26 - - [13/Oct/2025:01:04:38 +0700] "GET /alfa.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.208.171 - - [13/Oct/2025:01:04:38 +0700] "GET /inputs.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.71.81.171 - - [13/Oct/2025:01:04:39 +0700] "GET /ty.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.208.171 - - [13/Oct/2025:01:04:39 +0700] "GET /wp.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.189.67 - - [13/Oct/2025:01:04:39 +0700] "GET /xx.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.189.204 - - [13/Oct/2025:01:04:39 +0700] "GET /rss.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.71.124.171 - - [13/Oct/2025:01:04:39 +0700] "GET /mar.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.70.189.67 - - [13/Oct/2025:01:04:39 +0700] "GET /tinny.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.68.164.25 - - [13/Oct/2025:01:04:40 +0700] "GET /themes.php HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
162.158.162.50 - - [13/Oct/2025:01:04:40 +0700] "GET /warm.PhP7 HTTP/1.1" 301 169 "-" "-" "48.218.35.138"
172.71.81.171 - - [13/Oct/2025:01:06:34 +0700] "GET /.well-known/acme-challenge/R1EXB1OD_B_077H3O4IC0V18I-AUSGGV HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "2a02:4780:3:1f::a"
162.158.106.127 - - [13/Oct/2025:01:06:35 +0700] "GET /.well-known/acme-challenge/R1EXB1OD_B_077H3O4IC0V18I-AUSGGV HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "46.17.173.51"
172.71.124.56 - - [13/Oct/2025:01:06:35 +0700] "GET /.well-known/acme-challenge/RFV2RONWR948TJXHR1V5V36OT4VD9VO7 HTTP/1.1" 404 153 "-" "Cpanel-HTTP-Client/1.0" "2a02:4780:3:1f::a"
162.158.170.251 - - [13/Oct/2025:01:06:35 +0700] "GET /.well-known/acme-challenge/RFV2RONWR948TJXHR1V5V36OT4VD9VO7 HTTP/1.1" 404 153 "-" "Cpanel-HTTP-Client/1.0" "46.17.173.51"
142.93.95.65 - - [13/Oct/2025:01:07:18 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "-"
78.153.140.149 - - [13/Oct/2025:01:10:09 +0700] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
78.153.140.149 - - [13/Oct/2025:01:10:10 +0700] "POST / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
172.70.208.167 - - [13/Oct/2025:01:10:24 +0700] "GET /sftp-config.json HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "157.66.56.84"
172.70.142.163 - - [13/Oct/2025:01:10:25 +0700] "GET /.vscode/sftp.json HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "157.66.56.84"
172.70.208.80 - - [13/Oct/2025:01:12:37 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "182.44.10.67"
103.28.12.163 - - [13/Oct/2025:01:13:12 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:01:13:12 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
172.71.81.222 - - [13/Oct/2025:01:14:17 +0700] "GET /.well-known/acme-challenge/3NKX81MGVREEC1LB38J6STL059VXLWAN HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "2402:a7c0:3003:109:1c00:5aff:fe00:5f3"
172.69.176.166 - - [13/Oct/2025:01:14:22 +0700] "GET /.well-known/acme-challenge/3NKX81MGVREEC1LB38J6STL059VXLWAN HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "64.120.92.53"
172.184.213.227 - - [13/Oct/2025:01:17:05 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.9 aiohttp/3.10.6" "-"
204.76.203.219 - - [13/Oct/2025:01:20:06 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
162.158.88.131 - - [13/Oct/2025:01:21:23 +0700] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "46.101.159.72"
162.158.108.87 - - [13/Oct/2025:01:22:56 +0700] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Mobile Safari/537.36 MicroMessenger/7.0.1" "81.71.99.91"
204.76.203.18 - - [13/Oct/2025:01:23:03 +0700] "GET /bins/ HTTP/1.1" 404 153 "-" "-" "-"
162.158.88.90 - - [13/Oct/2025:01:24:02 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.164.13 - - [13/Oct/2025:01:24:02 +0700] "GET /zxl.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.189.33 - - [13/Oct/2025:01:24:02 +0700] "GET /gdn.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
104.23.175.146 - - [13/Oct/2025:01:24:02 +0700] "GET /new4.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:03 +0700] "GET /des.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.189.33 - - [13/Oct/2025:01:24:03 +0700] "GET /jga.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.92.232 - - [13/Oct/2025:01:24:03 +0700] "GET /abcd.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:03 +0700] "GET /nc4.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:03 +0700] "GET /we.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:04 +0700] "GET /lock360.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
108.162.227.51 - - [13/Oct/2025:01:24:04 +0700] "GET /class.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.242.17 - - [13/Oct/2025:01:24:04 +0700] "GET /ar.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
108.162.227.51 - - [13/Oct/2025:01:24:04 +0700] "GET /file.php? HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.108.57 - - [13/Oct/2025:01:24:04 +0700] "GET /cache.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.69.176.119 - - [13/Oct/2025:01:24:04 +0700] "GET /buy.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.171.2 - - [13/Oct/2025:01:24:05 +0700] "GET /lv.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:05 +0700] "GET /cong.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.164.13 - - [13/Oct/2025:01:24:05 +0700] "GET /mpvloi.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.189.103 - - [13/Oct/2025:01:24:05 +0700] "GET /bs1.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.92.232 - - [13/Oct/2025:01:24:05 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.171.2 - - [13/Oct/2025:01:24:06 +0700] "GET /js.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:06 +0700] "GET /wso.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.189.33 - - [13/Oct/2025:01:24:06 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.164.13 - - [13/Oct/2025:01:24:06 +0700] "GET /admin.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.92.232 - - [13/Oct/2025:01:24:06 +0700] "GET /makeasmtp.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.242.17 - - [13/Oct/2025:01:24:07 +0700] "GET /moon.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.88.90 - - [13/Oct/2025:01:24:07 +0700] "GET /simple.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:07 +0700] "GET /atomlib.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:07 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:07 +0700] "GET /autoload_classmap.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.92.232 - - [13/Oct/2025:01:24:08 +0700] "GET /radio.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.92.232 - - [13/Oct/2025:01:24:08 +0700] "GET /as.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:08 +0700] "GET /0.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.88.90 - - [13/Oct/2025:01:24:08 +0700] "GET /alfa.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.88.90 - - [13/Oct/2025:01:24:08 +0700] "GET /inputs.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
104.23.175.146 - - [13/Oct/2025:01:24:08 +0700] "GET /ty.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:09 +0700] "GET /wp.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.108.57 - - [13/Oct/2025:01:24:09 +0700] "GET /xx.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:09 +0700] "GET /rss.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.108.57 - - [13/Oct/2025:01:24:09 +0700] "GET /mar.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.189.103 - - [13/Oct/2025:01:24:09 +0700] "GET /tinny.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.171.2 - - [13/Oct/2025:01:24:09 +0700] "GET /themes.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:10 +0700] "GET /warm.PhP7 HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.208.146 - - [13/Oct/2025:01:24:13 +0700] "GET /xmrlpc.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:13 +0700] "GET /jlex.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:13 +0700] "GET /c.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
108.162.227.51 - - [13/Oct/2025:01:24:13 +0700] "GET /v22.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:13 +0700] "GET /byp.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.208.146 - - [13/Oct/2025:01:24:13 +0700] "GET /chosen.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.92.232 - - [13/Oct/2025:01:24:14 +0700] "GET /elp.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
108.162.227.51 - - [13/Oct/2025:01:24:14 +0700] "GET /mini.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.164.13 - - [13/Oct/2025:01:24:14 +0700] "GET /lc.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:14 +0700] "GET /wp-22.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.88.90 - - [13/Oct/2025:01:24:14 +0700] "GET /up.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.171.2 - - [13/Oct/2025:01:24:14 +0700] "GET /atombil.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.108.57 - - [13/Oct/2025:01:24:15 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.189.103 - - [13/Oct/2025:01:24:15 +0700] "GET /NewFile.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:15 +0700] "GET /akc.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.108.57 - - [13/Oct/2025:01:24:15 +0700] "GET /manager.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:15 +0700] "GET /fm.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.164.13 - - [13/Oct/2025:01:24:15 +0700] "GET /css.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.189.33 - - [13/Oct/2025:01:24:15 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.164.13 - - [13/Oct/2025:01:24:16 +0700] "GET /rk2.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.189.33 - - [13/Oct/2025:01:24:16 +0700] "GET /classsmtps.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.242.17 - - [13/Oct/2025:01:24:16 +0700] "GET /members.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.69.176.119 - - [13/Oct/2025:01:24:16 +0700] "GET /v1.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.171.2 - - [13/Oct/2025:01:24:16 +0700] "GET /cool.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.69.176.119 - - [13/Oct/2025:01:24:16 +0700] "GET /dex.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.88.90 - - [13/Oct/2025:01:24:17 +0700] "GET /akcc.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.208.146 - - [13/Oct/2025:01:24:17 +0700] "GET /406.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.88.90 - - [13/Oct/2025:01:24:17 +0700] "GET /222.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.69.176.119 - - [13/Oct/2025:01:24:17 +0700] "GET /akk.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.189.103 - - [13/Oct/2025:01:24:17 +0700] "GET /file1.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:17 +0700] "GET /pass.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:18 +0700] "GET /asdf.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:18 +0700] "GET /prod/infos.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
104.23.175.146 - - [13/Oct/2025:01:24:18 +0700] "GET /ioxi-o.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.142.119 - - [13/Oct/2025:01:24:18 +0700] "GET /ant.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.92.232 - - [13/Oct/2025:01:24:18 +0700] "GET /123.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.208.146 - - [13/Oct/2025:01:24:19 +0700] "GET /wpc.php?p= HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.71.124.45 - - [13/Oct/2025:01:24:19 +0700] "GET /mlex.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.106.167 - - [13/Oct/2025:01:24:19 +0700] "GET /v2.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:19 +0700] "GET /v4.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.171.2 - - [13/Oct/2025:01:24:19 +0700] "GET /ws.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.88.90 - - [13/Oct/2025:01:24:19 +0700] "GET /132.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
104.23.175.146 - - [13/Oct/2025:01:24:20 +0700] "GET /321.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.208.146 - - [13/Oct/2025:01:24:20 +0700] "GET /ok.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:20 +0700] "GET /r.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.69.176.119 - - [13/Oct/2025:01:24:20 +0700] "GET /mlex.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.70.189.33 - - [13/Oct/2025:01:24:20 +0700] "GET /wi.php HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
162.158.163.121 - - [13/Oct/2025:01:24:20 +0700] "GET /x2a.php56 HTTP/1.1" 301 169 "-" "-" "172.207.135.228"
172.68.164.130 - - [13/Oct/2025:01:25:13 +0700] "GET /aa.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.68.164.130 - - [13/Oct/2025:01:25:13 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.81.237 - - [13/Oct/2025:01:25:13 +0700] "GET /admin.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.69.176.167 - - [13/Oct/2025:01:25:14 +0700] "GET /akc.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.189.139 - - [13/Oct/2025:01:25:14 +0700] "GET /alfa.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
104.23.175.238 - - [13/Oct/2025:01:25:15 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.163.232 - - [13/Oct/2025:01:25:15 +0700] "GET /atomlib.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.81.237 - - [13/Oct/2025:01:25:15 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.143.168 - - [13/Oct/2025:01:25:16 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.69.176.167 - - [13/Oct/2025:01:25:16 +0700] "GET /abcd.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.106.190 - - [13/Oct/2025:01:25:16 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
108.162.226.211 - - [13/Oct/2025:01:25:17 +0700] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.68.164.130 - - [13/Oct/2025:01:25:17 +0700] "GET /makeasmtp.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.143.168 - - [13/Oct/2025:01:25:17 +0700] "GET /ioxi-o.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.81.237 - - [13/Oct/2025:01:25:18 +0700] "GET /wp-content/index.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
108.162.226.211 - - [13/Oct/2025:01:25:18 +0700] "GET /index.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.147.187 - - [13/Oct/2025:01:25:23 +0700] "GET /files.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.189.139 - - [13/Oct/2025:01:25:23 +0700] "GET /lock360.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
108.162.226.211 - - [13/Oct/2025:01:25:24 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.124.92 - - [13/Oct/2025:01:25:24 +0700] "GET /chosen.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.81.237 - - [13/Oct/2025:01:25:24 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
108.162.226.211 - - [13/Oct/2025:01:25:25 +0700] "GET /wp-admin/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.170.130 - - [13/Oct/2025:01:25:28 +0700] "GET /info.php/aa.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
108.162.226.211 - - [13/Oct/2025:01:25:28 +0700] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.81.237 - - [13/Oct/2025:01:25:29 +0700] "GET /about/function.php/aa.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.170.130 - - [13/Oct/2025:01:25:29 +0700] "GET /wp-includes/PHPMailer/Ab0ut.php/aa.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.108.11 - - [13/Oct/2025:01:25:29 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/file.php/aa.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.68.164.130 - - [13/Oct/2025:01:25:30 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
108.162.226.211 - - [13/Oct/2025:01:25:30 +0700] "GET /test1.php/aa.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.124.92 - - [13/Oct/2025:01:25:30 +0700] "GET /flower.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.163.232 - - [13/Oct/2025:01:25:31 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.189.68 - - [13/Oct/2025:01:25:31 +0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.68.164.130 - - [13/Oct/2025:01:25:31 +0700] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.143.168 - - [13/Oct/2025:01:25:33 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.88.131 - - [13/Oct/2025:01:25:33 +0700] "GET /cgi-bin/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.88.131 - - [13/Oct/2025:01:25:36 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.147.187 - - [13/Oct/2025:01:25:36 +0700] "GET /edit.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.68.164.130 - - [13/Oct/2025:01:25:37 +0700] "GET /functions.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.208.49 - - [13/Oct/2025:01:25:37 +0700] "GET /img/post.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.106.190 - - [13/Oct/2025:01:25:37 +0700] "GET /manager.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.189.139 - - [13/Oct/2025:01:25:38 +0700] "GET /radio.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.106.190 - - [13/Oct/2025:01:25:38 +0700] "GET /root.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.68.164.130 - - [13/Oct/2025:01:25:38 +0700] "GET /sim.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.208.49 - - [13/Oct/2025:01:25:39 +0700] "GET /system_log.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.163.232 - - [13/Oct/2025:01:25:39 +0700] "GET /update/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.124.92 - - [13/Oct/2025:01:25:41 +0700] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.170.130 - - [13/Oct/2025:01:25:42 +0700] "GET /wp-includes/blocks/comments/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.124.92 - - [13/Oct/2025:01:25:42 +0700] "GET /gecko.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.69.176.167 - - [13/Oct/2025:01:25:42 +0700] "GET /xmrlpc.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.69.176.167 - - [13/Oct/2025:01:25:43 +0700] "GET /wp-content/uploads/index.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
108.162.226.211 - - [13/Oct/2025:01:25:43 +0700] "GET /moon.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.208.49 - - [13/Oct/2025:01:25:44 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.88.131 - - [13/Oct/2025:01:25:44 +0700] "GET /uploads/admin.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.124.92 - - [13/Oct/2025:01:25:44 +0700] "GET /info.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.71.81.237 - - [13/Oct/2025:01:25:45 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.208.49 - - [13/Oct/2025:01:25:45 +0700] "GET /nc4.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.189.139 - - [13/Oct/2025:01:25:45 +0700] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.189.139 - - [13/Oct/2025:01:25:46 +0700] "GET /file2.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.69.176.167 - - [13/Oct/2025:01:25:46 +0700] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.170.130 - - [13/Oct/2025:01:25:46 +0700] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.208.49 - - [13/Oct/2025:01:25:47 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.170.130 - - [13/Oct/2025:01:25:47 +0700] "GET /wp-content/file.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.108.11 - - [13/Oct/2025:01:25:47 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.69.176.167 - - [13/Oct/2025:01:25:48 +0700] "GET /.well-known/ HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.143.168 - - [13/Oct/2025:01:25:48 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.106.190 - - [13/Oct/2025:01:25:48 +0700] "GET /2021/01/16/upload-and-download-file-using-multipart-form-over- HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
162.158.88.131 - - [13/Oct/2025:01:25:50 +0700] "GET /WSO.php HTTP/1.1" 301 169 "-" "-" "51.11.219.145"
172.70.208.80 - - [13/Oct/2025:01:26:56 +0700] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "2400:e920:0:a::82"
212.118.53.218 - - [13/Oct/2025:01:27:58 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
162.158.88.88 - - [13/Oct/2025:01:29:32 +0700] "GET /robots.txt HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" "216.244.66.238"
43.166.242.189 - - [13/Oct/2025:01:39:19 +0700] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
45.130.203.197 - - [13/Oct/2025:01:40:17 +0700] "GET /.git/HEAD HTTP/1.1" 301 169 "-" "Python-urllib/3.10" "-"
45.130.203.192 - - [13/Oct/2025:01:40:17 +0700] "GET /.git/HEAD HTTP/1.1" 502 157 "-" "Python-urllib/3.10" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/ HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/index.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/index.php HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/index2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/index2.php HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/index3.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /administrator/index3.php HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /joomla/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /joomla/administrator/ HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /cms/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /cms/administrator/ HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /site/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /site/administrator/ HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /web/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /web/administrator/ HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /panel/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
62.146.238.83 - - [13/Oct/2025:01:40:30 +0700] "GET /panel/administrator/ HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "-"
172.71.152.35 - - [13/Oct/2025:01:40:31 +0700] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.36" "194.26.192.110"
82.102.18.220 - - [13/Oct/2025:01:41:31 +0700] "GET /wp-login.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:31 +0700] "GET /wp-admin/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:32 +0700] "GET /wp-content/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:32 +0700] "GET /wp-includes/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:32 +0700] "GET /readme.html HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:32 +0700] "GET /license.txt HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:33 +0700] "GET /wp-json/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:33 +0700] "GET /xmlrpc.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:33 +0700] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:33 +0700] "GET /wp-admin/install.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:34 +0700] "GET /wp-content/themes/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:34 +0700] "GET /wp-content/plugins/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:34 +0700] "GET /wp-content/uploads/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:35 +0700] "GET /wp-admin/admin.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:35 +0700] "GET /wp-admin/index.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:35 +0700] "GET /wp-admin/profile.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:35 +0700] "GET /wp-admin/users.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:36 +0700] "GET /wp-admin/options-general.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:36 +0700] "GET /wp-includes/js/wp-embed.min.js HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:36 +0700] "GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:37 +0700] "GET /wp-includes/css/dashicons.min.css HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:37 +0700] "GET /wp-json/wp/v2/types/post HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:37 +0700] "GET /wp-json/wp/v2/pages HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:37 +0700] "GET /wp-json/wp/v2/media HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:38 +0700] "GET /wp-json/wp/v2/categories HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:38 +0700] "GET /wp-json/wp/v2/tags HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:38 +0700] "GET /wp-json/wp/v2/comments HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:38 +0700] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:39 +0700] "GET /wp-json/wp/v2/themes HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:39 +0700] "GET /wp-json/wp/v2/plugins HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:39 +0700] "GET /wp-json/wp/v2/block-types HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:40 +0700] "GET /wp-json/wp/v2/statuses HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:40 +0700] "GET /wp-json/wp/v2/taxonomies HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
82.102.18.220 - - [13/Oct/2025:01:41:40 +0700] "GET /wp-json/wp/v2/post-types HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
45.94.31.52 - - [13/Oct/2025:01:42:13 +0700] "GET /style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:15 +0700] "GET /wp-content/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:15 +0700] "GET /wp-content/themes/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:18 +0700] "GET /wp-admin/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:19 +0700] "GET /wp-includes/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:23 +0700] "GET /chosen.php?p= HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:24 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:24 +0700] "GET /flower.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:25 +0700] "GET /gifclass.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:25 +0700] "GET /bless.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:26 +0700] "GET /class-t.api.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:26 +0700] "GET /blurbs.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:27 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:27 +0700] "GET /abcd.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:28 +0700] "GET /flex.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:28 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:29 +0700] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:29 +0700] "GET /akc.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:30 +0700] "GET /zoo.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:30 +0700] "GET //zwso.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:31 +0700] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:31 +0700] "GET /bolt.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:32 +0700] "GET /shlo.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:33 +0700] "GET /files.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
45.94.31.52 - - [13/Oct/2025:01:42:33 +0700] "GET /wp-editor.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "-"
103.28.12.163 - - [13/Oct/2025:01:43:24 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:01:43:24 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
93.174.93.12 - - [13/Oct/2025:01:45:10 +0700] "GET / HTTP/1.0" 404 153 "-" "TurnitinBot (https://turnitin.com/robot/crawlerinfo.html)" "-"
104.23.175.113 - - [13/Oct/2025:01:48:38 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "196.251.72.221"
172.69.176.130 - - [13/Oct/2025:01:53:56 +0700] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "62.210.123.69,124.217.73.48"
172.69.176.119 - - [13/Oct/2025:01:55:00 +0700] "GET /index.php?cperpage=%31 HTTP/1.1" 301 169 "-" "'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36'" "109.165.13.76"
45.81.113.146 - - [13/Oct/2025:01:55:35 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
172.190.142.176 - - [13/Oct/2025:01:59:57 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:01:59:58 +0700] "GET /shoha.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:01:59:58 +0700] "GET /post.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:01:59:59 +0700] "GET /asd67.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:01:59:59 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:00 +0700] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:00 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:01 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:01 +0700] "GET /wp-includes/blocks/chosen.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:02 +0700] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:02 +0700] "GET /images/Marvins.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:03 +0700] "GET /wp-admin/doc.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:03 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:03 +0700] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:07 +0700] "GET /function/admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:08 +0700] "GET /wp-content/languages/ty.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:08 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:09 +0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:09 +0700] "GET /uploads/admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:10 +0700] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:10 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:11 +0700] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:11 +0700] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:11 +0700] "GET /wp-content/themes/file.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:12 +0700] "GET /f35.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:12 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:13 +0700] "GET /mail.php HTTP/1.1" 301 169 "-" "-" "-"
172.70.147.186 - - [13/Oct/2025:02:00:13 +0700] "GET /wp-json/wp/v2/users HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.190.142.176 - - [13/Oct/2025:02:00:13 +0700] "GET /wp-mail.php/wp-includes/ID3/getid3s.php HTTP/1.1" 301 169 "-" "-" "-"
172.71.81.238 - - [13/Oct/2025:02:00:15 +0700] "GET /?author=1 HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.190.142.176 - - [13/Oct/2025:02:00:16 +0700] "GET /wp-admin/css/colors/blue/makeasmtp.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:17 +0700] "GET /about/function.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:17 +0700] "GET /system_log.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:18 +0700] "GET /system.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:18 +0700] "GET /wp-admin/log.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:19 +0700] "GET /media.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:19 +0700] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 169 "-" "-" "-"
172.70.208.48 - - [13/Oct/2025:02:00:19 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Apache-HttpClient/4.5.13 (Java/11.0.28)" "86.54.24.140"
162.158.163.231 - - [13/Oct/2025:02:00:19 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.88.130 - - [13/Oct/2025:02:00:21 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.190.142.176 - - [13/Oct/2025:02:00:22 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:22 +0700] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:23 +0700] "GET /menu.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:23 +0700] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:24 +0700] "GET /02.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:24 +0700] "GET /makeasmtp.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:25 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:25 +0700] "GET /chosen.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:26 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:26 +0700] "GET /.well-known/log.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:27 +0700] "GET /lv.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:27 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:27 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 169 "-" "-" "-"
162.158.108.167 - - [13/Oct/2025:02:00:28 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.190.142.176 - - [13/Oct/2025:02:00:28 +0700] "GET /goat1.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:28 +0700] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:29 +0700] "GET /wp-includes/js/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:29 +0700] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:30 +0700] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:30 +0700] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:31 +0700] "GET /wp-conflg.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:31 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:32 +0700] "GET /wp-content/themes.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:32 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:32 +0700] "GET /filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:33 +0700] "GET /themes.php HTTP/1.1" 301 169 "-" "-" "-"
162.158.106.190 - - [13/Oct/2025:02:00:33 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.190.142.176 - - [13/Oct/2025:02:00:33 +0700] "GET /wp-includes/manager.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:34 +0700] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:34 +0700] "GET /wp-includes/sitemaps/providers/wp-login.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:35 +0700] "GET /images/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:35 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:36 +0700] "GET /wp-content/themes/1.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:36 +0700] "GET /admin/admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:37 +0700] "GET /bless.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:37 +0700] "GET /bless2.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:38 +0700] "GET /plugins.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:38 +0700] "GET /function/function.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:38 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:39 +0700] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:39 +0700] "GET /class.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:40 +0700] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:40 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:41 +0700] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:41 +0700] "GET /CLA.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:42 +0700] "GET /as/function.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:42 +0700] "GET /atomlib.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:43 +0700] "GET /cc.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:43 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:43 +0700] "GET /log.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:44 +0700] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:44 +0700] "GET /lock360.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:45 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:45 +0700] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:46 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:46 +0700] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:47 +0700] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:47 +0700] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:48 +0700] "GET /worksec.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:48 +0700] "GET /wp-admin/images/file.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:48 +0700] "GET /index/function.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:49 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:49 +0700] "GET /2.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:50 +0700] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:50 +0700] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/install.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:51 +0700] "GET /mar.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:51 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:52 +0700] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:52 +0700] "GET /wp-configs.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:53 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:53 +0700] "GET /update/f35.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:54 +0700] "GET /radio.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:54 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:00:54 +0700] "GET /baxa1.phP8 HTTP/1.1" 301 169 "-" "-" "-"
194.32.120.201 - - [13/Oct/2025:02:01:00 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
172.190.142.176 - - [13/Oct/2025:02:01:02 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:01:02 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:01:02 +0700] "GET /item.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:01:03 +0700] "GET /jp.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:01:03 +0700] "GET /wp-content/packed.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:01:08 +0700] "GET /up.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:01:09 +0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 169 "-" "-" "-"
172.190.142.176 - - [13/Oct/2025:02:01:09 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "-" "-"
194.32.120.201 - - [13/Oct/2025:02:01:17 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
194.32.120.201 - - [13/Oct/2025:02:01:26 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
194.32.120.201 - - [13/Oct/2025:02:01:37 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
194.32.120.201 - - [13/Oct/2025:02:01:47 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
194.32.120.201 - - [13/Oct/2025:02:02:00 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
194.32.120.201 - - [13/Oct/2025:02:02:16 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
172.68.164.169 - - [13/Oct/2025:02:02:24 +0700] "GET /wp-json/wp/v2/users HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
194.32.120.201 - - [13/Oct/2025:02:02:26 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
162.158.189.68 - - [13/Oct/2025:02:02:27 +0700] "GET /?author=1 HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.163.231 - - [13/Oct/2025:02:02:29 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Apache-HttpClient/4.5.13 (Java/11.0.28)" "86.54.24.140"
162.158.163.231 - - [13/Oct/2025:02:02:30 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.189.68 - - [13/Oct/2025:02:02:31 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
194.32.120.201 - - [13/Oct/2025:02:02:35 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
104.23.175.238 - - [13/Oct/2025:02:02:35 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.70.147.187 - - [13/Oct/2025:02:02:42 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.68.164.131 - - [13/Oct/2025:02:02:43 +0700] "GET /2021/07/13/hello-world/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" "95.221.198.192"
178.20.42.76 - - [13/Oct/2025:02:02:46 +0700] "GET / HTTP/1.0" 301 169 "http://livera.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" "-"
104.23.175.120 - - [13/Oct/2025:02:02:48 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "198.37.105.198"
172.69.176.118 - - [13/Oct/2025:02:03:37 +0700] "GET /2025/09/02/entendendo-as-chances-no-fswin-um-estudo-detalhado/ HTTP/1.1" 301 169 "https://rocioprime.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" "103.20.83.74"
172.70.143.168 - - [13/Oct/2025:02:03:38 +0700] "GET /wp-json/wp/v2/users HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.170.130 - - [13/Oct/2025:02:03:40 +0700] "GET /?author=1 HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.69.176.27 - - [13/Oct/2025:02:03:47 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Apache-HttpClient/4.5.13 (Java/11.0.28)" "86.54.24.140"
172.71.81.238 - - [13/Oct/2025:02:03:47 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.162.21 - - [13/Oct/2025:02:03:49 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.71.124.93 - - [13/Oct/2025:02:03:56 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.70.147.186 - - [13/Oct/2025:02:04:05 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.70.147.186 - - [13/Oct/2025:02:04:22 +0700] "GET /wp-json/wp/v2/users HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.71.81.238 - - [13/Oct/2025:02:04:24 +0700] "GET /?author=1 HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
104.23.175.238 - - [13/Oct/2025:02:04:28 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Apache-HttpClient/4.5.13 (Java/11.0.28)" "86.54.24.140"
172.68.164.130 - - [13/Oct/2025:02:04:28 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.108.167 - - [13/Oct/2025:02:04:30 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.68.164.130 - - [13/Oct/2025:02:04:36 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.71.81.238 - - [13/Oct/2025:02:04:46 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.71.81.238 - - [13/Oct/2025:02:04:49 +0700] "GET /wp-json/wp/v2/users HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
108.162.226.149 - - [13/Oct/2025:02:04:52 +0700] "GET /?author=1 HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.108.167 - - [13/Oct/2025:02:04:55 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Apache-HttpClient/4.5.13 (Java/11.0.28)" "86.54.24.140"
172.70.143.168 - - [13/Oct/2025:02:04:55 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.70.142.71 - - [13/Oct/2025:02:04:57 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.69.176.167 - - [13/Oct/2025:02:05:03 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.69.176.167 - - [13/Oct/2025:02:05:09 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
108.162.226.211 - - [13/Oct/2025:02:05:17 +0700] "GET /wp-json/wp/v2/users HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.70.208.49 - - [13/Oct/2025:02:05:19 +0700] "GET /?author=1 HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.70.189.140 - - [13/Oct/2025:02:05:23 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Apache-HttpClient/4.5.13 (Java/11.0.28)" "86.54.24.140"
172.70.189.140 - - [13/Oct/2025:02:05:23 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.108.167 - - [13/Oct/2025:02:05:28 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.163.231 - - [13/Oct/2025:02:05:34 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
172.71.81.238 - - [13/Oct/2025:02:05:39 +0700] "POST /wp-login.php HTTP/1.1" 301 169 "http://arunaya.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "86.54.24.140"
162.158.190.80 - - [13/Oct/2025:02:07:06 +0700] "GET / HTTP/1.1" 200 3293 "-" "-" "205.210.31.131"
162.158.108.20 - - [13/Oct/2025:02:07:57 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "2a06:98c0:3600::103"
172.68.242.104 - - [13/Oct/2025:02:08:19 +0700] "GET //chameleon.co.id/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js HTTP/1.1" 301 169 "-" "Opera/9.30 (Nintendo Wii; U; ; 2047-7; en)" "54.201.41.91"
172.70.93.84 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10" "54.201.41.91"
172.68.164.2 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" "54.201.41.91"
162.158.106.126 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.88 Safari/537.36 Vivaldi/2.4.1488.36" "54.201.41.91"
108.162.227.129 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3835.0 Safari/537.36" "54.201.41.91"
172.68.164.66 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "54.201.41.91"
104.23.175.63 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/jeg-elementor-kit/assets/js/elements/sticky-element.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" "54.201.41.91"
104.23.175.159 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/metform/public/assets/lib/cute-alert/cute-alert.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/74.0.3729.169 Chrome/74.0.3729.169 Safari/537.36" "54.201.41.91"
172.69.165.76 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/royal-elementor-addons/assets/js/frontend.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3864.0 Safari/537.36" "54.201.41.91"
172.70.142.14 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/royal-elementor-addons/assets/js/lib/jarallax/jarallax.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" "54.201.41.91"
172.70.147.191 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/royal-elementor-addons/assets/js/lib/parallax/parallax.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 7.0; Redmi Note 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "54.201.41.91"
162.158.108.85 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/royal-elementor-addons/assets/js/lib/particles/particles.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 9; SM-G950U1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "54.201.41.91"
172.69.176.138 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/royal-elementor-addons/assets/js/modal-popups.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; U; SunOS sun4m; en-US; rv:1.4b) Gecko/20030517 Mozilla Firebird/0.6" "54.201.41.91"
172.69.176.138 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 5 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" "54.201.41.91"
162.158.108.70 - - [13/Oct/2025:02:08:20 +0700] "GET //chameleon.co.id/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 YaBrowser/19.6.0.1583 Yowser/2.5 Safari/537.36" "54.201.41.91"
162.158.108.92 - - [13/Oct/2025:02:08:21 +0700] "GET //chameleon.co.id/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" "54.201.41.91"
162.158.106.91 - - [13/Oct/2025:02:08:21 +0700] "GET //chameleon.co.id/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G955F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "54.201.41.91"
172.70.93.82 - - [13/Oct/2025:02:08:21 +0700] "GET //chameleon.co.id/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.145 Safari/537.36 Vivaldi/2.6.1566.49" "54.201.41.91"
162.158.88.167 - - [13/Oct/2025:02:08:21 +0700] "GET //chameleon.co.id/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; U; Linux x86_64; sv-SE; rv:1.8.1.12) Gecko/20080207 Ubuntu/7.10 (gutsy) Firefox/2.0.0.12" "54.201.41.91"
172.70.188.154 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "54.201.41.91"
172.71.152.2 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-content/themes/astra/assets/js/minified/flexibility.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 9; Pixel 2 XL) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "54.201.41.91"
172.71.152.38 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-content/themes/astra/assets/js/minified/frontend.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G930F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "54.201.41.91"
172.70.93.110 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-content/themes/astra/assets/js/minified/mobile-cart.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" "54.201.41.91"
172.70.143.138 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-content/uploads/essential-addons-elementor/eael-5828.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/71.0.3578.98 Chrome/71.0.3578.98 Safari/537.36" "54.201.41.91"
172.71.124.204 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-includes/js/dist/dom-ready.min.js HTTP/1.1" 301 169 "-" "Offline Explorer/2.5" "54.201.41.91"
172.70.143.223 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-includes/js/dist/i18n.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.113 Safari/537.36 Vivaldi/2.1.1337.51" "54.201.41.91"
104.23.175.5 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 7.0; XT1585) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36" "54.201.41.91"
108.162.226.146 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" "54.201.41.91"
108.162.227.84 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-includes/js/jquery/ui/core.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 9; G8141) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "54.201.41.91"
162.158.88.132 - - [13/Oct/2025:02:08:22 +0700] "GET //chameleon.co.id/wp-includes/js/dist/hooks.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" "54.201.41.91"
162.158.162.119 - - [13/Oct/2025:02:08:23 +0700] "GET /wp-emoji-release.min.js HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.514.0 Safari/534.7" "54.201.41.91"
104.23.175.143 - - [13/Oct/2025:02:09:55 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.147.198 - - [13/Oct/2025:02:09:56 +0700] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "2a06:98c0:3600::103"
172.70.189.180 - - [13/Oct/2025:02:09:59 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
162.158.88.123 - - [13/Oct/2025:02:10:00 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.170.226 - - [13/Oct/2025:02:10:00 +0700] "GET /orm.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
162.158.106.25 - - [13/Oct/2025:02:10:01 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.92.196 - - [13/Oct/2025:02:10:01 +0700] "GET /gmo.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.71.81.252 - - [13/Oct/2025:02:10:01 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
108.162.227.58 - - [13/Oct/2025:02:10:02 +0700] "GET /akcc.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
162.158.190.47 - - [13/Oct/2025:02:10:02 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.208.134 - - [13/Oct/2025:02:10:02 +0700] "GET /nx.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.71.81.252 - - [13/Oct/2025:02:10:02 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.106.25 - - [13/Oct/2025:02:10:02 +0700] "GET /php.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
162.158.88.123 - - [13/Oct/2025:02:10:02 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.170.226 - - [13/Oct/2025:02:10:02 +0700] "GET /sx21_1.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.69.176.148 - - [13/Oct/2025:02:10:02 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.189.180 - - [13/Oct/2025:02:10:02 +0700] "GET /bluejackets.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.92.197 - - [13/Oct/2025:02:10:03 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.69.176.148 - - [13/Oct/2025:02:10:03 +0700] "GET /file17.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.71.124.178 - - [13/Oct/2025:02:10:03 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.92.196 - - [13/Oct/2025:02:10:03 +0700] "GET /pop.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.92.197 - - [13/Oct/2025:02:10:03 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.68.164.25 - - [13/Oct/2025:02:10:03 +0700] "GET /nx9.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
162.158.170.227 - - [13/Oct/2025:02:10:03 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.124.179 - - [13/Oct/2025:02:10:04 +0700] "GET /kwm4.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
108.162.227.58 - - [13/Oct/2025:02:10:04 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.106.25 - - [13/Oct/2025:02:10:04 +0700] "GET /ea3f.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.142.151 - - [13/Oct/2025:02:10:05 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.208.134 - - [13/Oct/2025:02:10:05 +0700] "GET /akp.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.69.165.19 - - [13/Oct/2025:02:10:05 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.81.252 - - [13/Oct/2025:02:10:05 +0700] "GET /xp.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
104.23.175.143 - - [13/Oct/2025:02:10:05 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.92.196 - - [13/Oct/2025:02:10:05 +0700] "GET /cwsd.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.142.151 - - [13/Oct/2025:02:10:06 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.92.196 - - [13/Oct/2025:02:10:06 +0700] "GET /1aa.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.71.124.178 - - [13/Oct/2025:02:10:06 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.142.150 - - [13/Oct/2025:02:10:07 +0700] "GET /litanies.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.69.176.148 - - [13/Oct/2025:02:10:07 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.92.196 - - [13/Oct/2025:02:10:07 +0700] "GET /asasx.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
162.158.88.123 - - [13/Oct/2025:02:10:07 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.88.122 - - [13/Oct/2025:02:10:07 +0700] "GET /just2.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
162.158.190.47 - - [13/Oct/2025:02:10:07 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.170.226 - - [13/Oct/2025:02:10:07 +0700] "GET /classwithtostring.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.208.135 - - [13/Oct/2025:02:10:08 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.190.48 - - [13/Oct/2025:02:10:09 +0700] "GET /j.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.68.164.24 - - [13/Oct/2025:02:10:09 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.124.179 - - [13/Oct/2025:02:10:09 +0700] "GET /g.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.71.124.178 - - [13/Oct/2025:02:10:09 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.190.48 - - [13/Oct/2025:02:10:09 +0700] "GET /ex.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.92.197 - - [13/Oct/2025:02:10:09 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.69.165.18 - - [13/Oct/2025:02:10:09 +0700] "GET /1.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.208.135 - - [13/Oct/2025:02:10:09 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.208.134 - - [13/Oct/2025:02:10:09 +0700] "GET /s.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
104.23.175.143 - - [13/Oct/2025:02:10:09 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.170.226 - - [13/Oct/2025:02:10:09 +0700] "GET /sx21_1.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.68.164.24 - - [13/Oct/2025:02:10:09 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.92.196 - - [13/Oct/2025:02:10:10 +0700] "GET /let.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.142.151 - - [13/Oct/2025:02:10:10 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.190.48 - - [13/Oct/2025:02:10:10 +0700] "GET /akcc.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.69.165.19 - - [13/Oct/2025:02:10:10 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.190.48 - - [13/Oct/2025:02:10:10 +0700] "GET /amphicyon.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.69.165.19 - - [13/Oct/2025:02:10:10 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.81.252 - - [13/Oct/2025:02:10:10 +0700] "GET /k.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.69.165.19 - - [13/Oct/2025:02:10:10 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.69.165.18 - - [13/Oct/2025:02:10:10 +0700] "GET /sec.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.142.151 - - [13/Oct/2025:02:10:10 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.142.150 - - [13/Oct/2025:02:10:11 +0700] "GET /xp.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
172.70.189.179 - - [13/Oct/2025:02:10:11 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.189.57 - - [13/Oct/2025:02:10:11 +0700] "GET /ext.php HTTP/1.1" 502 157 "-" "-" "48.210.11.197"
142.93.180.11 - - [13/Oct/2025:02:10:18 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "-"
142.93.180.11 - - [13/Oct/2025:02:10:19 +0700] "GET /favicon.ico HTTP/1.1" 301 169 "http://livera.id/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "-"
3.143.33.63 - - [13/Oct/2025:02:13:32 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" "-"
103.28.12.163 - - [13/Oct/2025:02:13:42 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:02:13:42 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
3.143.33.63 - - [13/Oct/2025:02:13:45 +0700] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03l\xA4)O>\x96\x07%\xD2)\xAF\xF0\x1F\x85\xAF\xB4\xD3#1G\x1C\xAD\xEE\x15jD,B\xC7\xB1=u\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" "-"
3.143.33.63 - - [13/Oct/2025:02:13:46 +0700] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03f\xE6" 400 157 "-" "-" "-"
3.143.33.63 - - [13/Oct/2025:02:13:47 +0700] "SSH-2.0-Go" 400 157 "-" "-" "-"
3.143.33.63 - - [13/Oct/2025:02:14:56 +0700] "" 400 0 "-" "-" "-"
172.71.81.137 - - [13/Oct/2025:02:16:10 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.189.22 - - [13/Oct/2025:02:16:11 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.208.81 - - [13/Oct/2025:02:16:11 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.81.137 - - [13/Oct/2025:02:16:11 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
108.162.226.76 - - [13/Oct/2025:02:16:11 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
104.23.175.25 - - [13/Oct/2025:02:16:11 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.189.22 - - [13/Oct/2025:02:16:11 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.208.81 - - [13/Oct/2025:02:16:12 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.68.164.153 - - [13/Oct/2025:02:16:12 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
104.23.175.11 - - [13/Oct/2025:02:16:12 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.189.174 - - [13/Oct/2025:02:16:12 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.108.20 - - [13/Oct/2025:02:16:12 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.68.164.153 - - [13/Oct/2025:02:16:13 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.189.174 - - [13/Oct/2025:02:16:13 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.208.19 - - [13/Oct/2025:02:16:13 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.147.197 - - [13/Oct/2025:02:16:13 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.163.137 - - [13/Oct/2025:02:16:13 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
104.23.175.25 - - [13/Oct/2025:02:16:13 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.88.47 - - [13/Oct/2025:02:16:14 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.108.20 - - [13/Oct/2025:02:16:14 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.208.19 - - [13/Oct/2025:02:16:14 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.189.54 - - [13/Oct/2025:02:16:14 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.143.131 - - [13/Oct/2025:02:16:14 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.124.100 - - [13/Oct/2025:02:16:14 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.68.164.153 - - [13/Oct/2025:02:16:15 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.107.11 - - [13/Oct/2025:02:16:15 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.107.95 - - [13/Oct/2025:02:16:15 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.189.54 - - [13/Oct/2025:02:16:15 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.81.137 - - [13/Oct/2025:02:16:15 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.88.47 - - [13/Oct/2025:02:16:15 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.88.47 - - [13/Oct/2025:02:16:15 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.82.98 - - [13/Oct/2025:02:16:16 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.189.54 - - [13/Oct/2025:02:16:16 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.189.54 - - [13/Oct/2025:02:16:16 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.142.163 - - [13/Oct/2025:02:17:47 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "91.201.115.242"
145.239.10.137 - - [13/Oct/2025:02:18:19 +0700] "GET /inputs.php HTTP/1.1" 301 169 "http://inapr.org/inputs.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" "-"
162.158.108.167 - - [13/Oct/2025:02:19:27 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "206.189.49.146"
172.68.164.148 - - [13/Oct/2025:02:19:28 +0700] "GET /favicon.ico HTTP/1.1" 301 169 "http://arunaya.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" "206.189.49.146"
87.121.84.101 - - [13/Oct/2025:02:19:34 +0700] "GET / HTTP/1.0" 404 153 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" "-"
162.158.88.89 - - [13/Oct/2025:02:20:48 +0700] "GET /robots.txt HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" "216.244.66.238"
43.156.204.134 - - [13/Oct/2025:02:20:48 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
129.28.14.231 - - [13/Oct/2025:02:21:31 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
87.120.191.91 - - [13/Oct/2025:02:21:59 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
176.65.141.87 - - [13/Oct/2025:02:22:07 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" "-"
162.158.88.122 - - [13/Oct/2025:02:23:54 +0700] "GET / HTTP/1.1" 502 157 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "66.132.153.133"
172.70.143.167 - - [13/Oct/2025:02:23:55 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "205.210.31.178"
162.158.108.146 - - [13/Oct/2025:02:23:56 +0700] "GET / HTTP/1.1" 200 3293 "http://172.67.132.117:80/" "-" "205.210.31.178"
194.163.129.51 - - [13/Oct/2025:02:26:14 +0700] "GET /admin/config.php HTTP/1.0" 404 153 "-" "xfa1" "-"
87.120.191.84 - - [13/Oct/2025:02:27:14 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
162.158.189.22 - - [13/Oct/2025:02:30:19 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.159.132.207"
172.71.82.59 - - [13/Oct/2025:02:33:02 +0700] "POST /qzkeyAdmin/ashx/FileHandler.ashx HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "137.175.57.11"
108.162.227.88 - - [13/Oct/2025:02:34:52 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "66.132.153.119"
162.158.189.205 - - [13/Oct/2025:02:35:34 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 169 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "38.242.208.103"
74.176.189.190 - - [13/Oct/2025:02:36:12 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:12 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:13 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:13 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:13 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:13 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:13 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:13 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:13 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:14 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:14 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:14 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:14 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:14 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:14 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:15 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:15 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:15 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:15 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:15 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:15 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:16 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:16 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:16 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:16 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:16 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:16 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:17 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:17 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:17 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:17 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:17 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:17 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:02:36:18 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "-"
45.33.14.5 - - [13/Oct/2025:02:37:36 +0700] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 zgrab/0.x" "-"
185.39.19.49 - - [13/Oct/2025:02:39:22 +0700] "GET / HTTP/1.0" 301 169 "http://dailytaxconsulting.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" "-"
172.69.176.167 - - [13/Oct/2025:02:39:42 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 169 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "134.209.158.203"
204.76.203.18 - - [13/Oct/2025:02:40:59 +0700] "GET /bin/ HTTP/1.1" 404 153 "-" "-" "-"
172.71.82.73 - - [13/Oct/2025:02:41:11 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "206.168.34.126"
162.158.163.144 - - [13/Oct/2025:02:41:46 +0700] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "114.117.233.112"
103.28.12.163 - - [13/Oct/2025:02:43:53 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:02:43:53 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
172.70.188.161 - - [13/Oct/2025:02:45:28 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" "45.131.155.100"
172.70.208.53 - - [13/Oct/2025:02:45:52 +0700] "GET / HTTP/1.1" 404 153 "-" "NiueBot/0.2" "54.167.233.115"
162.158.88.129 - - [13/Oct/2025:02:45:58 +0700] "GET / HTTP/1.1" 301 169 "-" "NiueBot/0.2" "54.167.233.115"
172.71.124.93 - - [13/Oct/2025:02:46:52 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "151.240.205.199"
87.120.191.84 - - [13/Oct/2025:02:49:24 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /inputs.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /images/class-config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /wp-content/1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /mar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /text.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /buy.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /function/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /as.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /contact.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /ws.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /file/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /wp-2019.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:08 +0700] "GET /wp-load.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /.well-known/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /z.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-admin/network/natural.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /dashboard.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /css.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-content/updates.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /xx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /geju.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /mah/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /x.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /lock360.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /byp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /license.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /mah.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /cc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /about/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:09 +0700] "GET /jp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-signin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /f35.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /blog.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-Owl.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /moon.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-blog.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /gg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /eagle.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /lufix.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /ant.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /cux.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /i.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-error.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /post.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /send.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /admin.php?attempt=1 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /manager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /alfa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /file7.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:10 +0700] "GET /wp-admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-content/packed.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /69.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-trackback.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /index/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /readme.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-cron.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /new.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /user.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /ty.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /tiny.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /admin/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-mail.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /we.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /wp-links.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:11 +0700] "GET /fm.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /elp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /dropdown.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /aa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /ioxi002.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /profile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /users.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /flower.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /v.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /file2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /a.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /file5.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /edit.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /filemanager/dialog.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /faiy.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:12 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /php8.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
162.158.88.48 - - [13/Oct/2025:02:50:13 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" "144.31.198.40"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /wp-includes/js/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /u.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /NewFile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /go.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /wp-info.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /system_log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /defaults.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /test.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /packed.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /item.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /av.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:13 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /simple.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /cgi-bin/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /bless.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-admin/options.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /leaf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /xBrain.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /lv.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-content/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /akc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /info.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /ee.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /options.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-admin/css/colors/ectoplasm/my1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /gecko.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /nf_tracking.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /admin/cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:14 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /admin/resources/dummy/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /shell20211028.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /default.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /wso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /13.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /wso112233.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /load.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /makeasmtp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /403.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:15 +0700] "GET /xc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /bolt.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /past.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /mini.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-includes/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /randkeyword.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /WSO.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /sts.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /ff2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /admin/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /w.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /.alf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /zwso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /system.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /file-manager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /wp-includes/wp-load.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:16 +0700] "GET /f.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/maint/users.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /classsmtps.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /ja.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /t.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /as/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /0x.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /ab.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin.phpdiegun.com/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /xleet.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /layout.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /baxa1.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /alfanew.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /theme.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /content.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /mail.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /leafmailer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /image-gallery.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /admin/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /file.php?fm=true HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:17 +0700] "GET /about.php?525 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /gel4y.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /simple/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /admin/WebService/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /baxa1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /ioxi-o.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /link.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /ini.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /annt.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /atomlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /adminfuns.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-atom.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /cong.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /ton.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /man.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:18 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-configs.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /shell.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-content/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /files.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /item.php/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /class.api.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /dz.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /bengi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/custom-plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /error.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /ar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /b.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /root.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:19 +0700] "GET /sb.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /BenX/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /22.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /bak.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/shell20211028.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /shx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/plugins/secure-fortress/avdb_3f7a1921c1e2b.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /admin/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /mailer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /webadmin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/themes/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /c.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /rss.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /flywheel.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /xxx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-admin/users.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /help.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /man.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /www.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /admin/include/student.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /0.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-logs.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-admin/css/OK.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /db.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wsa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-includes/Requests/src/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:20 +0700] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /edit.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /st.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/fonts/class-wp-font-face.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-admin/user/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /yanz.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/fonts/class-wp-font-library.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-admin/css/go.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /dash.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-content/plugins/fix/custom-plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /bala.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-content/themes/twentytwenty/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /fm1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /he.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /updates.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-admin/fw.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /01.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /alfanew.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /leaf_mailer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:21 +0700] "GET /adminfuns.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /abe.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-content/themes/pridmag/j.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/fonts/class-wp-font-utils.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /click.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /blog/fw.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /.well-known/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-content/themes/remv.php.INFECTED.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wordpress/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /menu.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/mah.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /alf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /baxa1.phP8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /m.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /inputs.phpdunamisconcept.com.ng/item.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-wso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /.well-known/info.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /assets/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-head.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /epinyins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /lock.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:22 +0700] "GET /wp-content.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /admin/function.php/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /admin/resources/cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /12.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /favicon.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes/js/codemirror/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /inc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-admin/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /files.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /fw.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /l.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /contents.php/lv.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-activate.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /.well-known/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /alfanew2.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /hi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /lf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp/abe.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes/header.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /ynz.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /gecko-new.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /fox.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /10.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:23 +0700] "GET /.well-known/wso112233.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /upload/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /t.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /about.php/wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /anj.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /bs1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /worksec.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /p.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /hehe.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-includes/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /vv.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/alfa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /randkeyword.PhP8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/maint/go.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /natural.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/images/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-includes/buy.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /o.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /al.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /.well-known/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:24 +0700] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /style.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/shell.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-includes/SimplePie/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /img/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /server.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-crom.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /asus.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /ioxi01.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /.well-known/as.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /bb.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /form.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /alex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-includes/SimplePie/XML/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /h.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /0byte.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /up.php?x= HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /.well-known/xoxo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-admin/wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /7.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-content/themes/twentytwelve/css/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:25 +0700] "GET /html_editor.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /.well-known/content.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /wp-includes/Text/Diff/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /wp-admin/js/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /ae.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /ws.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /wp-admin/nciii.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /soap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /.well-known/upfile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /.well-known/link.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:26 +0700] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /bsrdf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /uploads/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /berlin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /assets/bypass.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /update/f35.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-includes/SimplePie/Decode/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /index/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /priv8.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-content/403.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /millo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /phpinfo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /adminer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /.well-known/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /custom-plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /cron.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /functions.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /meta.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /test1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /app.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /browse.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /auth.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /files/tinyfilemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /cgyhj.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /gelay.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /lol.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /pages.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /js/fm.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /index/function.php/wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /02.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /bu5.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /core.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:27 +0700] "GET /wp-content/themes/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /bypass.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /tdgdesr.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /cgi-bin/moon.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /9.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-admin/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /acp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /ad.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /cong.phpprotectthekids-co.fireyourpestcompany.com/wp-includes/Text/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /xl.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-content/plugins/fix/xc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /d.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/images/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/unix.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-content/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /img/5/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /admin.php/wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /function/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /jquery.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /owl.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:28 +0700] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /beence.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-content/updraft/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-content/themes/twentytwentythree/parts/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-content/themes/twentytwenty/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /upfile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /q.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/programa_apoyo_editoriales.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/bak.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/js/tinymce/skins/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-editor.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/Requests/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/Text/Diff/alfa-rex.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /index/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /assets/images/niil.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /alfashell.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /y.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:29 +0700] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /files/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /assets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /.well-known/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /assets/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /admin/uploads/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-content/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /private/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /assets/images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-content/up HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /php/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:30 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /plugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /admin/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /upload/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /cgi-bin/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /modules/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /sites/default/files/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /uploads/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /vendor/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:31 +0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /tinyfilemanager HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /upload/image/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /admin/editor/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /shop/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /local/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /img/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /include/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /.well-known/pki-validation/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /images/stories/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /Site/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /admin/upload/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /system/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/languages/themes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /.well-knownold/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:32 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /docs/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/random_compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /backup/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /components/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /aspera/faspex/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-content HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-content/fonts/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.163"
172.71.81.38 - - [13/Oct/2025:02:50:33 +0700] "GET /.tmb/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.163"
159.89.165.4 - - [13/Oct/2025:02:52:53 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 169 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "-"
162.158.108.8 - - [13/Oct/2025:02:55:26 +0700] "GET /administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.170.8 - - [13/Oct/2025:02:55:26 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" "5.62.20.18"
162.158.108.41 - - [13/Oct/2025:02:55:28 +0700] "GET /administrator/index.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.108.41 - - [13/Oct/2025:02:55:28 +0700] "GET /administrator/index2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.108.41 - - [13/Oct/2025:02:55:29 +0700] "GET /administrator/index3.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.108.41 - - [13/Oct/2025:02:55:29 +0700] "GET /joomla/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.108.41 - - [13/Oct/2025:02:55:31 +0700] "GET /cms/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.108.41 - - [13/Oct/2025:02:55:33 +0700] "GET /site/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.108.41 - - [13/Oct/2025:02:55:35 +0700] "GET /web/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
162.158.108.41 - - [13/Oct/2025:02:55:37 +0700] "GET /panel/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "62.146.238.83"
172.68.164.130 - - [13/Oct/2025:02:57:03 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "182.42.111.213"
134.122.196.8 - - [13/Oct/2025:02:59:12 +0700] "GET / HTTP/1.1" 301 169 "http://inapr.org" "iaskspider/2.0(+http://iask.com/help/help_index.html\xA1\xB1)" "203.90.172.86"
78.153.140.149 - - [13/Oct/2025:03:00:38 +0700] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
78.153.140.149 - - [13/Oct/2025:03:00:38 +0700] "POST / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
205.210.31.80 - - [13/Oct/2025:03:01:34 +0700] "GET / HTTP/1.0" 404 153 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "-"
114.119.155.36 - - [13/Oct/2025:03:04:09 +0700] "GET /robots.txt HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" "-"
74.176.189.190 - - [13/Oct/2025:03:07:15 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:15 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:15 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:15 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:15 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:16 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:16 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:16 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:16 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:16 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:16 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:16 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:17 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:17 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:17 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:17 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:17 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:17 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:18 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:18 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:18 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:18 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:19 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:19 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:19 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:19 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:19 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:20 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:20 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:20 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:20 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:20 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:20 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
74.176.189.190 - - [13/Oct/2025:03:07:21 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "-"
162.158.108.120 - - [13/Oct/2025:03:13:14 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "205.210.31.8"
103.28.12.163 - - [13/Oct/2025:03:14:08 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:03:14:08 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
204.76.203.219 - - [13/Oct/2025:03:14:30 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
162.158.108.167 - - [13/Oct/2025:03:17:54 +0700] "GET /index.php?cperpage=%31 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "37.215.9.79"
118.123.1.31 - - [13/Oct/2025:03:19:47 +0700] "GET /ips/index.php HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:47 +0700] "GET /public/stylesheets/theme.css HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:47 +0700] "GET /index.php HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:47 +0700] "GET /chs/js/lang_zh_tw.js HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:47 +0700] "GET /stylesheets/theme.css HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:47 +0700] "GET /login/stylesheets/theme.css HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:47 +0700] "GET /index.php HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:48 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
118.123.1.31 - - [13/Oct/2025:03:19:48 +0700] "GET /customer/js/lang_zh_tw.js HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; KB974488)" "104.236.13.99"
194.163.129.51 - - [13/Oct/2025:03:23:46 +0700] "GET /admin/config.php HTTP/1.0" 404 153 "-" "xfa1" "-"
172.71.124.106 - - [13/Oct/2025:03:24:37 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.87 Safari/537.36" "5.62.56.78"
195.178.110.15 - - [13/Oct/2025:03:25:43 +0700] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03`\xE0\x96\x05b:\xB9c\xA9C\xC6@A\xD3^\xCA\xF3\xBE\xCA\x88\xDB\x92\xB7\xE8&4\x87\xDC>\x9E\x117 ~\xA2TU\xC5\xA7\xC3\x81\xD7\x87\xBC\x80\x09\xA64\x00\xF1\x00(\xF1\x8E\xB8\xC5\xE6+\xFFJ\xDB\xF3\x11\xEF\x05\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" "-"
195.178.110.15 - - [13/Oct/2025:03:25:44 +0700] "GET / HTTP/1.1" 400 157 "-" "-" "-"
195.178.110.15 - - [13/Oct/2025:03:25:44 +0700] "GET / HTTP/1.1" 404 153 "-" "l9tcpid/v1.1.0" "-"
162.158.108.121 - - [13/Oct/2025:03:26:27 +0700] "GET /about.php?action=p&api=p&path=p&token= HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "196.251.88.246"
35.185.55.92 - - [13/Oct/2025:03:30:49 +0700] "HEAD /news/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.56 Mobile Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:30:52 +0700] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 16_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" "-"
35.185.55.92 - - [13/Oct/2025:03:30:54 +0700] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; CPH2381) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.163 Mobile Safari/537.36 OPR/76.3.4027.73374" "-"
35.185.55.92 - - [13/Oct/2025:03:30:56 +0700] "HEAD /wordpress/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 16_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" "-"
35.185.55.92 - - [13/Oct/2025:03:30:58 +0700] "HEAD /new/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:00 +0700] "HEAD /press/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.140 Safari/537.36 Vivaldi/6.4.3160.47" "-"
35.185.55.92 - - [13/Oct/2025:03:31:04 +0700] "HEAD /fr/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:07 +0700] "HEAD /old/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:31:10 +0700] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.2365.66" "-"
35.185.55.92 - - [13/Oct/2025:03:31:11 +0700] "HEAD /de/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:13 +0700] "HEAD /shop/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 11; en-US; V2027) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/89.0.4389.116 UCBrowser/13.4.0.1306 Mobile Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:31:14 +0700] "HEAD /home/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.2365.66" "-"
35.185.55.92 - - [13/Oct/2025:03:31:17 +0700] "HEAD /2024/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.62 Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:31:18 +0700] "HEAD /site1/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 16_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" "-"
35.185.55.92 - - [13/Oct/2025:03:31:19 +0700] "HEAD /us/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.56 Mobile Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:31:21 +0700] "HEAD /cms/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:22 +0700] "HEAD /content/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" "-"
35.185.55.92 - - [13/Oct/2025:03:31:23 +0700] "HEAD /media/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:25 +0700] "HEAD /2023/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:31:26 +0700] "HEAD /website/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:124.0) Gecko/124.0 Firefox/124.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:28 +0700] "HEAD /site/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" "-"
35.185.55.92 - - [13/Oct/2025:03:31:29 +0700] "HEAD /v2/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "-"
35.185.55.92 - - [13/Oct/2025:03:31:31 +0700] "HEAD /en/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 12; CPH2381) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.163 Mobile Safari/537.36 OPR/76.3.4027.73374" "-"
35.185.55.92 - - [13/Oct/2025:03:31:33 +0700] "HEAD /main/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edg/125.0.2535.51" "-"
35.185.55.92 - - [13/Oct/2025:03:31:35 +0700] "HEAD /store/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:37 +0700] "HEAD /blog2/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:31:39 +0700] "HEAD /blog/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" "-"
35.185.55.92 - - [13/Oct/2025:03:31:40 +0700] "HEAD /web/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.5414.120 Safari/537.36" "-"
35.185.55.92 - - [13/Oct/2025:03:31:42 +0700] "HEAD /portal/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" "-"
79.127.132.27 - - [13/Oct/2025:03:32:14 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
79.127.132.27 - - [13/Oct/2025:03:32:14 +0700] "" 400 0 "-" "-" "-"
46.101.159.72 - - [13/Oct/2025:03:36:45 +0700] "GET / HTTP/1.1" 301 169 "-" "-" "-"
170.64.168.54 - - [13/Oct/2025:03:37:34 +0700] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-"
170.64.168.54 - - [13/Oct/2025:03:37:34 +0700] "GET /.git/config HTTP/1.1" 404 153 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-"
104.23.175.246 - - [13/Oct/2025:03:37:35 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "178.20.47.92"
93.123.109.214 - - [13/Oct/2025:03:40:03 +0700] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03Wx\x8E\x91\xD4\xB9\x9D\x1D\x84\xB9\x90,\xE7\x81\x0F\xA4d\xBA\xE8\xC8\xD9%\xCC&\xC8;\x5C\x09\xDFwT\xB7 \xFD\xADu:Z\x0F\xD20&\xE3\xF5=\xB1\x80\x1Fo\x1E\x1D[x\x87\x02\xD9\x8E\x845[9\xE5\xD0\x1B\xBF\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" "-"
93.123.109.214 - - [13/Oct/2025:03:40:04 +0700] "GET / HTTP/1.1" 400 157 "-" "-" "-"
93.123.109.214 - - [13/Oct/2025:03:40:04 +0700] "GET / HTTP/1.1" 404 153 "-" "l9tcpid/v1.1.0" "-"
103.28.12.163 - - [13/Oct/2025:03:45:26 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:03:45:26 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
191.99.68.59 - - [13/Oct/2025:03:49:11 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" "-"
172.69.176.12 - - [13/Oct/2025:03:51:32 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "129.211.215.233"
172.70.208.40 - - [13/Oct/2025:03:52:30 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
204.76.203.212 - - [13/Oct/2025:03:52:38 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "-"
104.23.175.51 - - [13/Oct/2025:03:52:42 +0700] "GET /favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.108.45 - - [13/Oct/2025:03:52:43 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.170.63 - - [13/Oct/2025:03:52:45 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.68.164.68 - - [13/Oct/2025:03:52:47 +0700] "GET /Alvin9999/https/fanfan1.net/daohang/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.142.229 - - [13/Oct/2025:03:52:49 +0700] "GET /officialsite HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.93.94 - - [13/Oct/2025:03:52:50 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.208.80 - - [13/Oct/2025:03:52:52 +0700] "GET /static/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.208.142 - - [13/Oct/2025:03:52:54 +0700] "GET /images/logo-cn-352x97_1.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.142.159 - - [13/Oct/2025:03:52:56 +0700] "GET /assets/images/logo-cn-vpnweb.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.68.164.22 - - [13/Oct/2025:03:52:58 +0700] "GET /static/images/home/VPNlogo.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.142.150 - - [13/Oct/2025:03:53:01 +0700] "GET /img/logo.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.71.124.193 - - [13/Oct/2025:03:53:02 +0700] "GET /static/icon/bjch.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.68.164.88 - - [13/Oct/2025:03:53:05 +0700] "GET /assets/images/icon-vpnweb.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
108.162.227.78 - - [13/Oct/2025:03:53:06 +0700] "GET /assets/images/official-site/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.71.124.76 - - [13/Oct/2025:03:53:08 +0700] "GET /v1/file/icon/seo/cdc3fff6-6034-46fb-8ef3-1746e374d4fc.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.190.19 - - [13/Oct/2025:03:53:10 +0700] "GET /fav-icon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.69.176.165 - - [13/Oct/2025:03:53:12 +0700] "GET /image/logo.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.88.85 - - [13/Oct/2025:03:53:15 +0700] "GET /images/default.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.142.101 - - [13/Oct/2025:03:53:17 +0700] "GET /static/image/logo2.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.108.87 - - [13/Oct/2025:03:53:19 +0700] "GET /themes/custom/ahaspeed/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.93.19 - - [13/Oct/2025:03:53:22 +0700] "GET /image/favicon.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.71.124.65 - - [13/Oct/2025:03:53:25 +0700] "GET /image/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.163.181 - - [13/Oct/2025:03:53:27 +0700] "GET /images/log1.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.170.36 - - [13/Oct/2025:03:53:28 +0700] "GET /details/images/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
104.23.175.78 - - [13/Oct/2025:03:53:30 +0700] "GET /images/favicon.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.208.13 - - [13/Oct/2025:03:53:32 +0700] "GET /txpro/img/html_icon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.208.50 - - [13/Oct/2025:03:53:33 +0700] "GET /assets/fire_admin/images/logo.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.93.2 - - [13/Oct/2025:03:53:35 +0700] "GET /statics/abc/images/tu/abcpppin_03.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.88.100 - - [13/Oct/2025:03:53:38 +0700] "GET /images/pc/logo.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.208.14 - - [13/Oct/2025:03:53:40 +0700] "GET /images/favicon-icon.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.106.170 - - [13/Oct/2025:03:53:43 +0700] "GET /images/favicon-196x196.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.71.124.237 - - [13/Oct/2025:03:53:45 +0700] "GET /assets/img/favicon.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.92.162 - - [13/Oct/2025:03:53:46 +0700] "GET /style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.70.92.162 - - [13/Oct/2025:03:53:47 +0700] "GET /wp-content/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.68.242.65 - - [13/Oct/2025:03:53:47 +0700] "GET /static/images/logo.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.163.246 - - [13/Oct/2025:03:53:48 +0700] "GET /wp-content/themes/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
162.158.108.142 - - [13/Oct/2025:03:53:48 +0700] "GET /images/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.71.82.12 - - [13/Oct/2025:03:53:50 +0700] "GET /static/picture/logo_jg2.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
108.162.226.145 - - [13/Oct/2025:03:53:50 +0700] "GET /wp-admin/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.68.164.24 - - [13/Oct/2025:03:53:51 +0700] "GET /wp-includes/style.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
162.158.162.48 - - [13/Oct/2025:03:53:51 +0700] "GET /favicon.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.108.115 - - [13/Oct/2025:03:53:52 +0700] "GET /chosen.php?p= HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.68.164.24 - - [13/Oct/2025:03:53:52 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
108.162.226.145 - - [13/Oct/2025:03:53:53 +0700] "GET /flower.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
162.158.108.82 - - [13/Oct/2025:03:53:53 +0700] "GET /theme/Bob-Theme-Argon/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.142.135 - - [13/Oct/2025:03:53:53 +0700] "GET /gifclass.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.71.81.53 - - [13/Oct/2025:03:53:54 +0700] "GET /bless.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.70.208.171 - - [13/Oct/2025:03:53:54 +0700] "GET /class-t.api.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.68.164.108 - - [13/Oct/2025:03:53:55 +0700] "GET /imgs/logox.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.170.8 - - [13/Oct/2025:03:53:56 +0700] "GET /blurbs.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.70.93.96 - - [13/Oct/2025:03:53:57 +0700] "GET /assets/index/kuailian/image/favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
162.158.170.8 - - [13/Oct/2025:03:53:57 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
162.158.108.115 - - [13/Oct/2025:03:53:57 +0700] "GET /abcd.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
108.162.226.145 - - [13/Oct/2025:03:53:58 +0700] "GET /flex.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.70.92.162 - - [13/Oct/2025:03:53:58 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.70.208.64 - - [13/Oct/2025:03:53:58 +0700] "GET /img/logo_512.png HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" "116.52.141.86"
172.70.142.135 - - [13/Oct/2025:03:53:59 +0700] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
162.158.88.129 - - [13/Oct/2025:03:53:59 +0700] "GET /akc.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
162.158.106.100 - - [13/Oct/2025:03:53:59 +0700] "GET /zoo.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
104.23.175.246 - - [13/Oct/2025:03:54:00 +0700] "GET //zwso.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.70.92.162 - - [13/Oct/2025:03:54:01 +0700] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
108.162.226.145 - - [13/Oct/2025:03:54:01 +0700] "GET /bolt.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
162.158.163.246 - - [13/Oct/2025:03:54:03 +0700] "GET /shlo.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.69.176.119 - - [13/Oct/2025:03:54:04 +0700] "GET /files.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
104.23.175.246 - - [13/Oct/2025:03:54:05 +0700] "GET /wp-editor.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" "185.241.208.74"
172.70.189.67 - - [13/Oct/2025:03:57:33 +0700] "POST /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "5.62.56.77"
172.70.147.186 - - [13/Oct/2025:03:57:47 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" "109.105.210.57"
172.70.147.186 - - [13/Oct/2025:03:57:49 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" "109.105.210.59"
91.224.92.17 - - [13/Oct/2025:04:00:44 +0700] "GET / HTTP/1.1" 404 153 "-" "-" "-"
172.70.92.163 - - [13/Oct/2025:04:05:20 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "2a02:6ea0:3603:3003:6bc7:23a8:b761:ee42"
104.23.175.246 - - [13/Oct/2025:04:05:41 +0700] "GET /.well-known/acme-challenge/_5TLPHFRI9QBUTMTWE_JBJGGL6JCUXU0 HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "2a02:4780:3:1f::a"
162.158.170.8 - - [13/Oct/2025:04:05:41 +0700] "GET /.well-known/acme-challenge/_5TLPHFRI9QBUTMTWE_JBJGGL6JCUXU0 HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "46.17.173.51"
172.70.188.17 - - [13/Oct/2025:04:05:42 +0700] "GET /.well-known/acme-challenge/GQ2GIXT5-D4-_UI0UB49U7_H2AJA4B1F HTTP/1.1" 404 153 "-" "Cpanel-HTTP-Client/1.0" "2a02:4780:3:1f::a"
172.68.242.54 - - [13/Oct/2025:04:05:42 +0700] "GET /.well-known/acme-challenge/GQ2GIXT5-D4-_UI0UB49U7_H2AJA4B1F HTTP/1.1" 404 153 "-" "Cpanel-HTTP-Client/1.0" "46.17.173.51"
172.71.82.11 - - [13/Oct/2025:04:05:45 +0700] "GET /inputs.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /images/class-config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /mar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/themes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /xmlrpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /text.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /buy.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /function/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /as.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/css/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /tinyfilemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /contact.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /ws.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /file/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-2019.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-load.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /.well-known/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /assets/images/doc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /z.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/network/natural.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /dashboard.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /css.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/images/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/updates.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /xx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /geju.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/themes/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /mah/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-includes/assets/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /x.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /admin/upload/css.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /lock360.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /byp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /license.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /mah.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /cgi-bin/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /alfa-rex.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /cc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /about/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /jp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/maint/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-signin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /f35.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /blog.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-Owl.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /moon.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-blog.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-includes/css/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /gg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /eagle.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-admin/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /lufix.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /ant.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /cux.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /i.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:45 +0700] "GET /wp-error.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /post.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /send.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /admin.php?attempt=1 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /manager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /alfa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /file7.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-blog-header.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/packed.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /69.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-trackback.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /index/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /readme.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-cron.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /new.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /user.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /ty.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /tiny.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /admin/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-mail.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /we.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-links.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /fm.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /elp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /dropdown.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /aa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /ioxi002.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-admin/network/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /profile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /users.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /flower.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /v.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /file2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /a.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-admin/setup-config.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /file5.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /edit.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /filemanager/dialog.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /faiy.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /php8.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-includes/js/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /u.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-content/languages/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /NewFile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /go.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /wp-info.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /system_log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /defaults.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:46 +0700] "GET /test.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /packed.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /item.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /av.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /simple.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /cgi-bin/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /bless.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/options.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /leaf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /xBrain.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /lv.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /akc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /info.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /ee.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /options.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/css/colors/ectoplasm/my1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /gecko.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /nf_tracking.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/plugins/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /admin/cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /admin/resources/dummy/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /shell20211028.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/network/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /default.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /13.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wso112233.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /load.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /makeasmtp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /403.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /xc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /bolt.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /gawean.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /past.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /mini.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /randkeyword.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /WSO.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /sts.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /ff2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /admin/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /w.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /.alf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /zwso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /system.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /file-manager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-includes/wp-load.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /f.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/maint/users.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /classsmtps.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /ja.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /t.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /as/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:47 +0700] "GET /randkeyword.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /0x.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /ab.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin.phpdiegun.com/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /xleet.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/network/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /layout.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /baxa1.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /alfanew.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /theme.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /content.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /mail.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/js/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /leafmailer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /image-gallery.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /admin/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /file.php?fm=true HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /about.php?525 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /gel4y.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /simple/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /goods.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /admin/WebService/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /baxa1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /autoload_classmap/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /doc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /ioxi-o.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /link.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /ini.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /annt.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /atomlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/customize/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /adminfuns.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/cong.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-atom.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /cong.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /ton.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /man.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/Text/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-configs.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /.well-known/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/includes/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /shell.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /files.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /item.php/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /class.api.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /dz.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /bengi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:48 +0700] "GET /wp-admin/custom-plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /error.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /ar.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /b.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /anonse/lock360.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /root.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /sb.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /BenX/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /22.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /bak.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/shell20211028.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /shx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/plugins/secure-fortress/avdb_3f7a1921c1e2b.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /admin/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /mailer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /webadmin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/themes/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /c.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /rss.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /flywheel.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /xxx.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/users.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /help.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /man.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /www.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /admin/include/student.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /0.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-logs.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/css/OK.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /db.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wsa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/Requests/src/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /edit.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /st.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/blue.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/fonts/class-wp-font-face.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/user/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /yanz.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /MARIJUANA.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-includes/fonts/class-wp-font-library.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:49 +0700] "GET /wp-admin/css/go.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /dash.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/plugins/fix/custom-plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /bala.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/themes/twentytwenty/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /fm1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /he.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /updates.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/fw.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /01.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /alfanew.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /leaf_mailer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /adminfuns.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /abe.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/themes/pridmag/j.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/fonts/class-wp-font-utils.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /click.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /blog/fw.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /.well-known/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/themes/remv.php.INFECTED.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wordpress/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /menu.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/mah.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /alf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /.well-known/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /baxa1.phP8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /m.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /inputs.phpdunamisconcept.com.ng/item.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/wp-class.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-wso.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /.well-known/info.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /assets/images/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-head.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /epinyins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /lock.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /admin/function.php/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-links-opml.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /admin/resources/cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /12.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /favicon.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/js/codemirror/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /inc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /files.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /fw.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /l.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /contents.php/lv.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-activate.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /.well-known/log.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /alfanew2.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /hi.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:50 +0700] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /lf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-config-sample.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp/abe.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/header.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /ynz.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /gecko-new.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /fox.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /10.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/wso112233.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.bod/.ll/ss.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /upload/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/rk2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /t.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /about.php/wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /anj.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /bs1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /worksec.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /p.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /hehe.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /vv.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/alfa.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /randkeyword.PhP8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/maint/go.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /natural.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/images/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/buy.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /o.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /al.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /style.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-l0gin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/shell.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/SimplePie/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /img/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /server.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-crom.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /worm0.PhP7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /asus.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /ioxi01.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/user/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /.well-known/as.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /bb.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /form.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:51 +0700] "GET /alex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/SimplePie/XML/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /h.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /0byte.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /up.php?x= HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /.well-known/xoxo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /7.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/twentytwelve/css/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /html_editor.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /.well-known/content.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/Text/Diff/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/js/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /ae.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /ws.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/nciii.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /soap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /.well-known/upfile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /.well-known/link.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /bsrdf.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /uploads/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /berlin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /assets/bypass.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /update/f35.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/SimplePie/Decode/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /index/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /priv8.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/403.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/mah.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /millo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /phpinfo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /adminer.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /.well-known/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /custom-plugin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /cron.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /functions.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /meta.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /test1.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /app.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /browse.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /auth.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /files/tinyfilemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /cgyhj.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /gelay.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /lol.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp_wrong_datlib.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /pages.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /js/fm.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /index/function.php/wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /02.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /bu5.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /core.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/file.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /bypass.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /tdgdesr.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /cgi-bin/moon.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/themes.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /9.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-admin/404.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /acp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:52 +0700] "GET /ad.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /cong.phpprotectthekids-co.fireyourpestcompany.com/wp-includes/Text/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /xl.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/plugins/fix/xc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /d.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/images/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/unix.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/install.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /img/5/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /admin.php/wp-includes/Text/network.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /function/admin.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /jquery.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /owl.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /beence.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/updraft/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/themes/twentytwentythree/parts/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/themes/twentytwenty/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /upfile.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /q.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/programa_apoyo_editoriales.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/bak.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/js/tinymce/skins/alfa-rex.php8 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-editor.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/Requests/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/Text/Diff/alfa-rex.php7 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /index/function.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /assets/images/niil.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /alfashell.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /y.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/assets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /files/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-content/themes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /assets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/user/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /.well-known/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/js/crop/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/html-api/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/blocks/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/pomo/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/customize/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /assets/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/Text/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-includes/block-supports/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:53 +0700] "GET /wp-admin/maint/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/plugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /admin/uploads/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/meta/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/ID3/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /private/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/Requests/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/upgrade/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/uploads/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /assets/images/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/css/dist/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/widgets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/up HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/certificates/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /php/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /plugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/fonts/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /admin/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/IXR/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/network/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /upload/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /cgi-bin/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/php-compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /modules/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/rest-api/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/images/media/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /sites/default/files/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/js/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/js/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /uploads/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/style-engine/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /vendor/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/css/colors/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /ALFA_DATA/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /tinyfilemanager HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /upload/image/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /admin/editor/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /shop/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /local/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:54 +0700] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /img/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /include/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /.well-known/pki-validation/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /images/stories/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /Site/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /admin/upload/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /system/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/languages/themes/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /.well-knownold/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /docs/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/random_compat/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /backup/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "149.88.106.171"
172.71.81.176 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /components/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/js/dist/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /aspera/faspex/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/fonts/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" "149.88.106.171"
172.71.82.11 - - [13/Oct/2025:04:05:55 +0700] "GET /.tmb/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" "149.88.106.171"
93.123.109.214 - - [13/Oct/2025:04:07:45 +0700] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03@awfc\xA8\xE8\x7F\x02\xD1\xDCiC\xF4\xAB\xE0e\xB2c\xDA\x87\x8CF\xFC\xFA\xD0\xD4\xBE\x06\x1E\xC9\x0C \x8E\xA90\x8BIu\x09&\xA5G\xC0\x22\xEF\x05\xA7\xE6\x1A\x95\xFC0\x0E\xDD\x8D\xAA\x9A\xB1\x1B}\xAFIY\x22\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" "-"
93.123.109.214 - - [13/Oct/2025:04:07:45 +0700] "GET / HTTP/1.1" 400 157 "-" "-" "-"
93.123.109.214 - - [13/Oct/2025:04:07:46 +0700] "GET / HTTP/1.1" 404 153 "-" "l9tcpid/v1.1.0" "-"
172.70.142.63 - - [13/Oct/2025:04:07:58 +0700] "GET /robots.txt HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" "216.244.66.199"
103.203.56.2 - - [13/Oct/2025:04:08:25 +0700] "GET / HTTP/1.1" 404 153 "-" "HTTP Banner Detection (https://security.ipip.net)" "-"
4.227.95.84 - - [13/Oct/2025:04:08:51 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:53 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:53 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:54 +0700] "GET /orm.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:54 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:55 +0700] "GET /gmo.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:55 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:55 +0700] "GET /akcc.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:55 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:55 +0700] "GET /nx.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:56 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:56 +0700] "GET /php.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:56 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:56 +0700] "GET /sx21_1.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:56 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:57 +0700] "GET /bluejackets.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:57 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:57 +0700] "GET /file17.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:57 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:57 +0700] "GET /pop.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:58 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:58 +0700] "GET /nx9.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:58 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:59 +0700] "GET /kwm4.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:59 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:59 +0700] "GET /ea3f.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:59 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:08:59 +0700] "GET /akp.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:00 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:01 +0700] "GET /xp.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:01 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:02 +0700] "GET /cwsd.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:02 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:03 +0700] "GET /1aa.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:03 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:03 +0700] "GET /litanies.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:03 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:03 +0700] "GET /asasx.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:04 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:04 +0700] "GET /just2.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:04 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:04 +0700] "GET /classwithtostring.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:04 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:05 +0700] "GET /j.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:05 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:05 +0700] "GET /g.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:06 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:06 +0700] "GET /ex.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:06 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:07 +0700] "GET /1.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:07 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:07 +0700] "GET /s.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:07 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:07 +0700] "GET /sx21_1.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:08 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:08 +0700] "GET /let.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:08 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:08 +0700] "GET /akcc.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:09 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:09 +0700] "GET /amphicyon.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:09 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:09 +0700] "GET /k.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:10 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:10 +0700] "GET /sec.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:10 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:10 +0700] "GET /xp.php HTTP/1.1" 502 157 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:10 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "-"
4.227.95.84 - - [13/Oct/2025:04:09:11 +0700] "GET /ext.php HTTP/1.1" 502 157 "-" "-" "-"
172.70.143.166 - - [13/Oct/2025:04:10:39 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.68.164.75 - - [13/Oct/2025:04:10:40 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.163.199 - - [13/Oct/2025:04:10:40 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.69.176.131 - - [13/Oct/2025:04:10:40 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.147.161 - - [13/Oct/2025:04:10:40 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.106.253 - - [13/Oct/2025:04:10:40 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.170.76 - - [13/Oct/2025:04:10:41 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.147.161 - - [13/Oct/2025:04:10:41 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
108.162.226.79 - - [13/Oct/2025:04:10:41 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.69.176.165 - - [13/Oct/2025:04:10:41 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.147.161 - - [13/Oct/2025:04:10:41 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
108.162.226.79 - - [13/Oct/2025:04:10:42 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.69.176.165 - - [13/Oct/2025:04:10:42 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.143.166 - - [13/Oct/2025:04:10:42 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.188.161 - - [13/Oct/2025:04:10:42 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.189.51 - - [13/Oct/2025:04:10:42 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.81.141 - - [13/Oct/2025:04:10:42 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.124.235 - - [13/Oct/2025:04:10:43 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.170.139 - - [13/Oct/2025:04:10:43 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.208.103 - - [13/Oct/2025:04:10:43 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.69.176.131 - - [13/Oct/2025:04:10:43 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.81.51 - - [13/Oct/2025:04:10:43 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
108.162.226.79 - - [13/Oct/2025:04:10:43 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.108.160 - - [13/Oct/2025:04:10:44 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.142.98 - - [13/Oct/2025:04:10:44 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.69.176.165 - - [13/Oct/2025:04:10:44 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.70.143.166 - - [13/Oct/2025:04:10:44 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.106.253 - - [13/Oct/2025:04:10:44 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.71.124.235 - - [13/Oct/2025:04:10:45 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.108.160 - - [13/Oct/2025:04:10:45 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.88.84 - - [13/Oct/2025:04:10:45 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.170.139 - - [13/Oct/2025:04:10:45 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
172.68.164.113 - - [13/Oct/2025:04:10:45 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.158.163.199 - - [13/Oct/2025:04:10:45 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "74.176.189.190"
162.142.125.119 - - [13/Oct/2025:04:11:03 +0700] "GET / HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
162.142.125.119 - - [13/Oct/2025:04:11:04 +0700] "PRI * HTTP/2.0" 400 157 "-" "-" "-"
162.142.125.119 - - [13/Oct/2025:04:11:09 +0700] "PRI * HTTP/2.0" 400 157 "-" "-" "-"
162.142.125.119 - - [13/Oct/2025:04:11:11 +0700] "GET /.well-known/security.txt HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
162.158.88.130 - - [13/Oct/2025:04:12:39 +0700] "GET /index.php?cperpage=%31 HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.0.0" "94.51.234.66"
45.148.10.204 - - [13/Oct/2025:04:14:08 +0700] "GET /.git/config HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-"
162.158.108.50 - - [13/Oct/2025:04:14:17 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.2; rv:46.0) Gecko/20100101 Firefox/46.0" "185.166.197.27"
162.158.107.18 - - [13/Oct/2025:04:14:18 +0700] "GET /.well-known/acme-challenge/MIC9EX2_N1O0XIN7F-IQ6H0MZ-GTQYSW HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "2402:a7c0:3003:109:1c00:5aff:fe00:5f3"
172.70.189.111 - - [13/Oct/2025:04:14:22 +0700] "GET /.well-known/acme-challenge/MIC9EX2_N1O0XIN7F-IQ6H0MZ-GTQYSW HTTP/1.1" 301 169 "-" "Cpanel-HTTP-Client/1.0" "64.120.92.53"
103.28.12.163 - - [13/Oct/2025:04:15:22 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:04:15:22 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
176.65.141.86 - - [13/Oct/2025:04:15:28 +0700] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 153 "-" "-" "-"
172.71.124.209 - - [13/Oct/2025:04:19:46 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" "202.56.2.88"
172.70.208.25 - - [13/Oct/2025:04:19:49 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.124.215 - - [13/Oct/2025:04:19:49 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.82.11 - - [13/Oct/2025:04:19:50 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.142.96 - - [13/Oct/2025:04:19:50 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
108.162.227.2 - - [13/Oct/2025:04:19:50 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.107.17 - - [13/Oct/2025:04:19:50 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.82.11 - - [13/Oct/2025:04:19:51 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.142.96 - - [13/Oct/2025:04:19:51 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.68.164.51 - - [13/Oct/2025:04:19:51 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.208.25 - - [13/Oct/2025:04:19:51 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
108.162.227.2 - - [13/Oct/2025:04:19:52 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.170.27 - - [13/Oct/2025:04:19:52 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.93.119 - - [13/Oct/2025:04:19:52 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.170.27 - - [13/Oct/2025:04:19:52 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
104.23.175.121 - - [13/Oct/2025:04:19:52 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.68.164.51 - - [13/Oct/2025:04:19:52 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.69.165.21 - - [13/Oct/2025:04:19:53 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.107.17 - - [13/Oct/2025:04:19:53 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.142.96 - - [13/Oct/2025:04:19:53 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.69.165.21 - - [13/Oct/2025:04:19:53 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.107.17 - - [13/Oct/2025:04:19:54 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.189.40 - - [13/Oct/2025:04:19:54 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.82.11 - - [13/Oct/2025:04:19:54 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
104.23.175.121 - - [13/Oct/2025:04:19:54 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
108.162.227.2 - - [13/Oct/2025:04:19:55 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.189.40 - - [13/Oct/2025:04:19:55 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.88.106 - - [13/Oct/2025:04:19:55 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.93.119 - - [13/Oct/2025:04:19:55 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.71.82.11 - - [13/Oct/2025:04:19:55 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.189.40 - - [13/Oct/2025:04:19:55 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.108.103 - - [13/Oct/2025:04:19:56 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.69.165.21 - - [13/Oct/2025:04:19:56 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
172.70.189.112 - - [13/Oct/2025:04:19:56 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
162.158.189.40 - - [13/Oct/2025:04:19:56 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "48.210.11.197"
104.251.82.218 - - [13/Oct/2025:04:23:37 +0700] "GET / HTTP/1.1" 502 559 "-" "\x22Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36\x22" "-"
172.70.142.134 - - [13/Oct/2025:04:23:50 +0700] "GET / HTTP/1.1" 301 169 "http://rocioprime.com/" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" "40.88.21.235"
162.158.170.90 - - [13/Oct/2025:04:23:51 +0700] "GET /favicon.ico HTTP/1.1" 301 169 "http://rocioprime.com/favicon.ico" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" "40.88.21.235"
162.158.88.106 - - [13/Oct/2025:04:24:49 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.106.69 - - [13/Oct/2025:04:24:49 +0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2845 "-" "-" "52.169.13.133"
172.68.242.87 - - [13/Oct/2025:04:24:50 +0700] "GET /orm.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.170.80 - - [13/Oct/2025:04:24:50 +0700] "GET /orm.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
172.70.208.65 - - [13/Oct/2025:04:24:50 +0700] "GET /gmo.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
104.23.175.44 - - [13/Oct/2025:04:24:50 +0700] "GET /gmo.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
172.69.165.65 - - [13/Oct/2025:04:24:50 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.88.107 - - [13/Oct/2025:04:24:51 +0700] "GET /akcc.php HTTP/1.1" 404 2820 "-" "-" "52.169.13.133"
172.70.142.130 - - [13/Oct/2025:04:24:51 +0700] "GET /nx.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.162.106 - - [13/Oct/2025:04:24:51 +0700] "GET /nx.php HTTP/1.1" 404 2818 "-" "-" "52.169.13.133"
172.69.176.144 - - [13/Oct/2025:04:24:51 +0700] "GET /php.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.88.107 - - [13/Oct/2025:04:24:52 +0700] "GET /php.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
162.158.170.81 - - [13/Oct/2025:04:24:52 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.162.106 - - [13/Oct/2025:04:24:52 +0700] "GET /sx21_1.php HTTP/1.1" 404 2822 "-" "-" "52.169.13.133"
172.68.164.147 - - [13/Oct/2025:04:24:52 +0700] "GET /bluejackets.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
108.162.227.138 - - [13/Oct/2025:04:24:52 +0700] "GET /bluejackets.php HTTP/1.1" 404 2824 "-" "-" "52.169.13.133"
162.158.190.79 - - [13/Oct/2025:04:24:53 +0700] "GET /file17.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.92.187 - - [13/Oct/2025:04:24:53 +0700] "GET /file17.php HTTP/1.1" 404 2821 "-" "-" "52.169.13.133"
172.71.124.224 - - [13/Oct/2025:04:24:53 +0700] "GET /pop.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.68.164.146 - - [13/Oct/2025:04:24:53 +0700] "GET /pop.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
172.68.242.87 - - [13/Oct/2025:04:24:53 +0700] "GET /nx9.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.69.166.50 - - [13/Oct/2025:04:24:54 +0700] "GET /nx9.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
162.158.88.106 - - [13/Oct/2025:04:24:54 +0700] "GET /kwm4.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.106.69 - - [13/Oct/2025:04:24:54 +0700] "GET /kwm4.php HTTP/1.1" 404 2821 "-" "-" "52.169.13.133"
104.23.175.44 - - [13/Oct/2025:04:24:54 +0700] "GET /ea3f.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.68.164.146 - - [13/Oct/2025:04:24:54 +0700] "GET /ea3f.php HTTP/1.1" 404 2820 "-" "-" "52.169.13.133"
172.69.176.144 - - [13/Oct/2025:04:24:55 +0700] "GET /akp.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.162.106 - - [13/Oct/2025:04:24:55 +0700] "GET /akp.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
108.162.227.138 - - [13/Oct/2025:04:24:55 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.189.22 - - [13/Oct/2025:04:24:55 +0700] "GET /xp.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
162.158.108.97 - - [13/Oct/2025:04:24:56 +0700] "GET /cwsd.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.106.69 - - [13/Oct/2025:04:24:56 +0700] "GET /cwsd.php HTTP/1.1" 404 2820 "-" "-" "52.169.13.133"
172.69.176.144 - - [13/Oct/2025:04:24:56 +0700] "GET /1aa.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.93.118 - - [13/Oct/2025:04:24:56 +0700] "GET /1aa.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
162.158.170.81 - - [13/Oct/2025:04:24:56 +0700] "GET /litanies.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.189.22 - - [13/Oct/2025:04:24:56 +0700] "GET /litanies.php HTTP/1.1" 404 2822 "-" "-" "52.169.13.133"
172.68.242.87 - - [13/Oct/2025:04:24:57 +0700] "GET /asasx.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.108.96 - - [13/Oct/2025:04:24:57 +0700] "GET /asasx.php HTTP/1.1" 404 2820 "-" "-" "52.169.13.133"
172.69.165.65 - - [13/Oct/2025:04:24:57 +0700] "GET /just2.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.71.124.224 - - [13/Oct/2025:04:24:57 +0700] "GET /just2.php HTTP/1.1" 404 2820 "-" "-" "52.169.13.133"
162.158.108.97 - - [13/Oct/2025:04:24:57 +0700] "GET /classwithtostring.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.142.130 - - [13/Oct/2025:04:24:58 +0700] "GET /classwithtostring.php HTTP/1.1" 404 2827 "-" "-" "52.169.13.133"
162.158.190.79 - - [13/Oct/2025:04:24:58 +0700] "GET /j.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.170.80 - - [13/Oct/2025:04:24:58 +0700] "GET /j.php HTTP/1.1" 404 2818 "-" "-" "52.169.13.133"
162.158.190.79 - - [13/Oct/2025:04:24:58 +0700] "GET /g.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.108.96 - - [13/Oct/2025:04:24:58 +0700] "GET /g.php HTTP/1.1" 404 2818 "-" "-" "52.169.13.133"
172.70.142.130 - - [13/Oct/2025:04:24:59 +0700] "GET /ex.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.162.106 - - [13/Oct/2025:04:24:59 +0700] "GET /ex.php HTTP/1.1" 404 2818 "-" "-" "52.169.13.133"
172.70.208.65 - - [13/Oct/2025:04:24:59 +0700] "GET /1.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.189.22 - - [13/Oct/2025:04:24:59 +0700] "GET /1.php HTTP/1.1" 404 2818 "-" "-" "52.169.13.133"
162.158.108.97 - - [13/Oct/2025:04:25:00 +0700] "GET /s.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.93.118 - - [13/Oct/2025:04:25:00 +0700] "GET /s.php HTTP/1.1" 404 2818 "-" "-" "52.169.13.133"
172.70.208.65 - - [13/Oct/2025:04:25:00 +0700] "GET /sx21_1.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.208.64 - - [13/Oct/2025:04:25:00 +0700] "GET /sx21_1.php HTTP/1.1" 404 2822 "-" "-" "52.169.13.133"
172.68.242.87 - - [13/Oct/2025:04:25:00 +0700] "GET /let.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.162.106 - - [13/Oct/2025:04:25:01 +0700] "GET /let.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
172.69.165.65 - - [13/Oct/2025:04:25:01 +0700] "GET /akcc.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.106.69 - - [13/Oct/2025:04:25:01 +0700] "GET /akcc.php HTTP/1.1" 404 2820 "-" "-" "52.169.13.133"
172.71.124.224 - - [13/Oct/2025:04:25:01 +0700] "GET /amphicyon.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.162.106 - - [13/Oct/2025:04:25:01 +0700] "GET /amphicyon.php HTTP/1.1" 404 2822 "-" "-" "52.169.13.133"
172.70.142.130 - - [13/Oct/2025:04:25:02 +0700] "GET /k.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.68.242.86 - - [13/Oct/2025:04:25:02 +0700] "GET /k.php HTTP/1.1" 404 2818 "-" "-" "52.169.13.133"
172.70.189.22 - - [13/Oct/2025:04:25:02 +0700] "GET /sec.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.106.69 - - [13/Oct/2025:04:25:02 +0700] "GET /sec.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
108.162.227.138 - - [13/Oct/2025:04:25:02 +0700] "GET /xp.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
162.158.88.107 - - [13/Oct/2025:04:25:03 +0700] "GET /xp.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
172.68.164.147 - - [13/Oct/2025:04:25:03 +0700] "GET /ext.php HTTP/1.1" 301 169 "-" "-" "52.169.13.133"
172.70.189.22 - - [13/Oct/2025:04:25:03 +0700] "GET /ext.php HTTP/1.1" 404 2819 "-" "-" "52.169.13.133"
78.153.140.149 - - [13/Oct/2025:04:28:20 +0700] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
78.153.140.149 - - [13/Oct/2025:04:28:20 +0700] "POST / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-"
172.236.228.208 - - [13/Oct/2025:04:31:46 +0700] "GET / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
172.68.164.68 - - [13/Oct/2025:04:31:55 +0700] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "62.210.123.69,49.48.44.185"
169.150.203.195 - - [13/Oct/2025:04:34:04 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
169.150.203.195 - - [13/Oct/2025:04:34:04 +0700] "" 400 0 "-" "-" "-"
162.158.170.113 - - [13/Oct/2025:04:35:00 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "45.80.184.87"
172.68.164.49 - - [13/Oct/2025:04:35:01 +0700] "GET /favicon.ico HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" "45.80.184.87"
118.89.233.234 - - [13/Oct/2025:04:35:57 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
162.158.88.51 - - [13/Oct/2025:04:36:12 +0700] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "115.77.151.225"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /ckeditor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /assets/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /webboard/plugins/editors/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /admin/editor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /ckeditor/plugins/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /admin-panel/vendor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /assets/plugin/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /plugins/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:42 +0700] "GET /admin/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /vendor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /painel/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /panel/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /yonetim/engine/ckeditor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /assets/admin/js/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /js/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /upload/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /site/plugins/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /assets/js/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /app/libraries/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /modules/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /lib/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:43 +0700] "GET /uploads/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /storage/app/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /inc/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /assets/ckeditor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /resources/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /modules/admin/editor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /system/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /assets/admin/plugins/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /en/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /plugin/ckeditor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /data/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /core/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /files/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /admin/public/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /media/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:44 +0700] "GET /modules/ckeditor/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /plugin/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /system/libraries/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /foo/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /bar/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /test/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /tmp/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /secret/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /logs/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /config/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:45 +0700] "GET /private/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:46 +0700] "GET /data/uploads/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:46 +0700] "GET /images/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
134.209.99.6 - - [13/Oct/2025:04:36:46 +0700] "GET /uploads/cache/kcfinder/upload.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Linux; Android 10; Test Bot) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0 Safari/537.36" "-"
172.70.189.174 - - [13/Oct/2025:04:38:29 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
172.70.189.174 - - [13/Oct/2025:04:38:29 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
172.70.208.80 - - [13/Oct/2025:04:38:29 +0700] "POST /wp-plain.php HTTP/1.1" 301 169 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
172.68.164.152 - - [13/Oct/2025:04:38:29 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
162.158.162.104 - - [13/Oct/2025:04:38:29 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "45.94.31.28"
172.70.147.197 - - [13/Oct/2025:04:38:34 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
62.146.238.83 - - [13/Oct/2025:04:38:55 +0700] "GET /administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /administrator/ HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /administrator/index.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /administrator/index.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /administrator/index2.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /administrator/index2.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /administrator/index3.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /administrator/index3.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /joomla/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /joomla/administrator/ HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /cms/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /cms/administrator/ HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /site/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /site/administrator/ HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /web/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /web/administrator/ HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /panel/administrator/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
62.146.238.83 - - [13/Oct/2025:04:38:56 +0700] "GET /panel/administrator/ HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
103.28.12.163 - - [13/Oct/2025:04:44:27 +0700] "GET / HTTP/1.1" 301 169 "-" "Python/3.11 aiohttp/3.9.2" "-"
103.28.12.163 - - [13/Oct/2025:04:44:27 +0700] "GET / HTTP/1.1" 502 157 "-" "Python/3.11 aiohttp/3.9.2" "-"
172.70.189.67 - - [13/Oct/2025:04:50:13 +0700] "GET / HTTP/1.1" 301 169 "http://rocioprime.com/" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" "40.88.21.235"
162.158.170.91 - - [13/Oct/2025:04:50:14 +0700] "GET /favicon.ico HTTP/1.1" 301 169 "http://rocioprime.com/favicon.ico" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" "40.88.21.235"
204.76.203.18 - - [13/Oct/2025:04:50:29 +0700] "GET /backup/ HTTP/1.1" 404 153 "-" "-" "-"
172.69.176.167 - - [13/Oct/2025:04:51:01 +0700] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "89.149.52.50"
172.71.124.69 - - [13/Oct/2025:04:52:33 +0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
172.69.176.12 - - [13/Oct/2025:04:52:33 +0700] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "45.94.31.28"
104.23.175.166 - - [13/Oct/2025:04:52:33 +0700] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
104.23.175.166 - - [13/Oct/2025:04:52:33 +0700] "POST /wp-plain.php HTTP/1.1" 301 169 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
162.158.106.79 - - [13/Oct/2025:04:52:33 +0700] "GET / HTTP/1.1" 301 169 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
172.70.93.94 - - [13/Oct/2025:04:52:34 +0700] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.94.31.28"
103.124.104.216 - - [13/Oct/2025:04:55:24 +0700] "GET / HTTP/1.1" 502 559 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
172.71.81.211 - - [13/Oct/2025:04:56:05 +0700] "GET /2021/07/13/hello-world/ HTTP/1.1" 301 169 "http://arunaya.com/2021/07/13/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" "171.229.208.207"