View file File name : sublime.lk Content :167.99.83.91 - - [20/Feb/2026:07:41:39 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 4.188.251.0 - - [20/Feb/2026:07:44:07 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:10 -0500] "GET /azpaq.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:11 -0500] "GET /bclms.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:12 -0500] "GET /bivvw.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:13 -0500] "GET /byueb.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:14 -0500] "GET /coiuz.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:14 -0500] "GET /click.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:15 -0500] "GET /cxxuv.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:16 -0500] "GET /dawvg.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:16 -0500] "GET /dhjqs.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:18 -0500] "GET /dqagu.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:19 -0500] "GET /druqr.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:19 -0500] "GET /dyxbc.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:20 -0500] "GET /ebuom.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:21 -0500] "GET /emcgm.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:22 -0500] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:22 -0500] "GET /frdyx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:23 -0500] "GET /fwtoa.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:24 -0500] "GET /gbhyv.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:24 -0500] "GET /gedim.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:25 -0500] "GET /ibano.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:27 -0500] "GET /jctyd.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:28 -0500] "GET /junvh.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:29 -0500] "GET /kaduu.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:30 -0500] "GET /kandw.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:30 -0500] "GET /kduhq.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:31 -0500] "GET /vopxx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:32 -0500] "GET /wcoiw.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:33 -0500] "GET /wtogs.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:33 -0500] "GET /xbbih.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:34 -0500] "GET /xcakx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:35 -0500] "GET /xopgt.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:35 -0500] "GET /xsjtz.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:36 -0500] "GET /zvinn.php HTTP/1.1" 301 795 "-" "-" 18.219.131.181 - - [20/Feb/2026:08:13:20 -0500] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 18.219.131.181 - - [20/Feb/2026:08:13:20 -0500] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 167.99.83.91 - - [20/Feb/2026:07:41:39 -0500] "GET /favicon.ico HTTP/1.1" 301 795 "http://sublime.lk/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 4.188.251.0 - - [20/Feb/2026:07:44:08 -0500] "GET /abhjr.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:09 -0500] "GET /anczg.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:09 -0500] "GET /ardsw.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:10 -0500] "GET /atfis.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:12 -0500] "GET /bykdo.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:13 -0500] "GET /cjndd.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:15 -0500] "GET /ctjpseby.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:17 -0500] "GET /diayd.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:17 -0500] "GET /dljpy.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:20 -0500] "GET /eapjf.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:21 -0500] "GET /euocu.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:23 -0500] "GET /fsjzs.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:26 -0500] "GET /ifrea.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:26 -0500] "GET /itlvk.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:27 -0500] "GET /jtfocpif.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:28 -0500] "GET /jvtsa.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:29 -0500] "GET /kagug.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:31 -0500] "GET /rgjrq.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:07:44:34 -0500] "GET /xjgdw.php HTTP/1.1" 301 795 "-" "-" 158.94.208.149 - - [20/Feb/2026:07:54:33 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 43.131.32.36 - - [20/Feb/2026:08:09:07 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.111.216 - - [20/Feb/2026:08:09:29 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.111.216 - - [20/Feb/2026:08:09:29 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 18.219.131.181 - - [20/Feb/2026:08:13:21 -0500] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 34.122.207.216 - - [20/Feb/2026:08:32:30 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 216.244.66.194 - - [20/Feb/2026:09:13:38 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.194 - - [20/Feb/2026:09:15:54 -0500] "GET /images/portfolio/ranmalbeach.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 130.89.144.171 - - [20/Feb/2026:09:30:42 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 130.89.144.171 - - [20/Feb/2026:09:30:43 -0500] "GET / HTTP/1.1" 301 795 "-" "OI-Crawler/Nutch (https://openintel.nl/webcrawl/)" 216.244.66.194 - - [20/Feb/2026:10:02:08 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.194 - - [20/Feb/2026:10:03:59 -0500] "GET /images/social-media-marketing.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 192.36.109.104 - - [20/Feb/2026:10:23:58 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 91.122.56.59 - - [20/Feb/2026:10:27:48 -0500] "GET /.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 49.51.166.228 - - [20/Feb/2026:10:31:27 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.122.56.59 - - [20/Feb/2026:10:27:48 -0500] "GET /api/.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 198.186.131.58 - - [20/Feb/2026:10:40:19 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2784.83 Safari/537.36" 43.164.197.209 - - [20/Feb/2026:11:26:01 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.188.56.166 - - [20/Feb/2026:11:35:04 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:05 -0500] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:05 -0500] "GET /ws58.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:06 -0500] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:07 -0500] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:08 -0500] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:08 -0500] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:09 -0500] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:09 -0500] "GET /zu.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:10 -0500] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:10 -0500] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:11 -0500] "GET /a332.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:11 -0500] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:12 -0500] "GET /to.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:13 -0500] "GET /fresh3.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:13 -0500] "GET /selesai.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:15 -0500] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:15 -0500] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:17 -0500] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:18 -0500] "GET /ak.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:19 -0500] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:19 -0500] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:20 -0500] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:20 -0500] "GET /logs1.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:21 -0500] "GET /lanka.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:21 -0500] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:22 -0500] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:23 -0500] "GET /easy.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:24 -0500] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:25 -0500] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:25 -0500] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:26 -0500] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:26 -0500] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:28 -0500] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:28 -0500] "GET /gk.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:30 -0500] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:31 -0500] "GET /amp.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:32 -0500] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:32 -0500] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:33 -0500] "GET /wp-link10.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:33 -0500] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:34 -0500] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:34 -0500] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:35 -0500] "GET /rtx.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:35 -0500] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:06 -0500] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:06 -0500] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:07 -0500] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:07 -0500] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:08 -0500] "GET /users.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:10 -0500] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:11 -0500] "GET /f2.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:12 -0500] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:12 -0500] "GET /thui.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:13 -0500] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:14 -0500] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:14 -0500] "GET /maraz.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:14 -0500] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:15 -0500] "GET /24.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:16 -0500] "GET /bzjdlofz.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:16 -0500] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:16 -0500] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:17 -0500] "GET /fetch.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:18 -0500] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:18 -0500] "GET /wp-style.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:19 -0500] "GET /0x0x.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:20 -0500] "GET /35.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:21 -0500] "GET /knmt.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:22 -0500] "GET /lkui.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:23 -0500] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:23 -0500] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:23 -0500] "GET /s1.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:24 -0500] "GET /cc13.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:24 -0500] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:25 -0500] "GET /export.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:26 -0500] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:27 -0500] "GET /ccu.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:27 -0500] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:27 -0500] "GET /xsox.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:28 -0500] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:29 -0500] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:29 -0500] "GET /zxekqlxb.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:29 -0500] "GET /wp-scr1pts.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:30 -0500] "GET /shlo.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:30 -0500] "GET /6bcwiqwj.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:31 -0500] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:31 -0500] "GET /ws69.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:32 -0500] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:33 -0500] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:34 -0500] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:35 -0500] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:36 -0500] "GET /h2a2ck.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:36 -0500] "GET /cytyr.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:37 -0500] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:38 -0500] "GET /w1px.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:40 -0500] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:41 -0500] "GET /global.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:36 -0500] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:36 -0500] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:37 -0500] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:37 -0500] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:38 -0500] "GET /ws68.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:39 -0500] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:39 -0500] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:39 -0500] "GET /galer.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:39 -0500] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:40 -0500] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.188.56.166 - - [20/Feb/2026:11:35:41 -0500] "GET /R57.php HTTP/1.1" 301 795 "-" "-" 119.28.177.175 - - [20/Feb/2026:12:04:52 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.69.38 - - [20/Feb/2026:12:09:57 -0500] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 216.244.66.194 - - [20/Feb/2026:12:22:39 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 114.80.36.40 - - [20/Feb/2026:12:24:13 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [20/Feb/2026:12:24:34 -0500] "GET /girls/smurf/blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 95.181.232.134 - - [20/Feb/2026:13:07:57 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:54 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:54 -0500] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:55 -0500] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:55 -0500] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:55 -0500] "GET /config.phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:55 -0500] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:56 -0500] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:56 -0500] "GET /server-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:56 -0500] "GET /env.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 46.183.186.197 - - [20/Feb/2026:13:26:03 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0" 136.0.213.103 - - [20/Feb/2026:13:14:37 -0500] "GET /phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:47 -0500] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:54 -0500] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:54 -0500] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:55 -0500] "GET /php_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:55 -0500] "GET /admin/phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:55 -0500] "GET /pinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:56 -0500] "GET /phpinfo2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:56 -0500] "GET /php_version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 136.0.213.103 - - [20/Feb/2026:13:14:56 -0500] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 176.195.127.156 - - [20/Feb/2026:13:37:58 -0500] "GET /?q=user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2974.16 Safari/537.36" 162.142.125.122 - - [20/Feb/2026:13:59:14 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2a01:239:481:7400::1 - - [20/Feb/2026:14:03:19 -0500] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 98.89.254.180 - - [20/Feb/2026:14:41:14 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 216.244.66.194 - - [20/Feb/2026:14:48:06 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.194 - - [20/Feb/2026:14:49:58 -0500] "GET /images/graphic-and-logo-design.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 103.163.220.25 - - [20/Feb/2026:15:00:25 -0500] "GET /vendor/phpunit/phpunit/phpunit.xsd HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 185.91.127.15 - - [20/Feb/2026:15:03:18 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2647.61 Safari/537.36" 116.76.38.229 - - [20/Feb/2026:15:24:49 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3911.139 Safari/537.36 SE 2.X MetaSr 1.0" 93.158.90.30 - - [20/Feb/2026:15:26:13 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 66.249.69.97 - - [20/Feb/2026:15:40:00 -0500] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 13.79.87.25 - - [20/Feb/2026:15:57:29 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:30 -0500] "GET /yussef.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:30 -0500] "GET /wp-session.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:31 -0500] "GET /tailed.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:31 -0500] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:32 -0500] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:32 -0500] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:33 -0500] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:33 -0500] "GET /samiri.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:34 -0500] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:35 -0500] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:35 -0500] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:37 -0500] "GET /fault.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:37 -0500] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:39 -0500] "GET /god.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:39 -0500] "GET /666.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:40 -0500] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:40 -0500] "GET /un.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:41 -0500] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:41 -0500] "GET /nnyvn.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:42 -0500] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:43 -0500] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:44 -0500] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:45 -0500] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:46 -0500] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:47 -0500] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:47 -0500] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:47 -0500] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:48 -0500] "GET /admiin.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:48 -0500] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:49 -0500] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:50 -0500] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:50 -0500] "GET /in.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:51 -0500] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:51 -0500] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:52 -0500] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:53 -0500] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:53 -0500] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:54 -0500] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:55 -0500] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:55 -0500] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:55 -0500] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:56 -0500] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:56 -0500] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:57 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:57 -0500] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:29 -0500] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:30 -0500] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:31 -0500] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:32 -0500] "GET /moshou.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:33 -0500] "GET /seetox.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:34 -0500] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:34 -0500] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:35 -0500] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:36 -0500] "GET /shas.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:36 -0500] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:36 -0500] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:36 -0500] "GET /er.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:37 -0500] "GET /66.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:38 -0500] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:38 -0500] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:38 -0500] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:39 -0500] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:40 -0500] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:41 -0500] "GET /login8.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:42 -0500] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:42 -0500] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:42 -0500] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:43 -0500] "GET /ya.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:43 -0500] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:44 -0500] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:44 -0500] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:45 -0500] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:45 -0500] "GET /06.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:46 -0500] "GET /fot.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:46 -0500] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:48 -0500] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:49 -0500] "GET /re.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:49 -0500] "GET /num.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:49 -0500] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:50 -0500] "GET /style.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:51 -0500] "GET /we.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:52 -0500] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:52 -0500] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:53 -0500] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:54 -0500] "GET /155.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:54 -0500] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:56 -0500] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:57 -0500] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:58 -0500] "GET /async.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:59 -0500] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:00 -0500] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:00 -0500] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:58 -0500] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:58 -0500] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:58 -0500] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:59 -0500] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:57:59 -0500] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:00 -0500] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:01 -0500] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:02 -0500] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:02 -0500] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:03 -0500] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:03 -0500] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:03 -0500] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:04 -0500] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:04 -0500] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:05 -0500] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:05 -0500] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:06 -0500] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:07 -0500] "GET //about.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:07 -0500] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:08 -0500] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:09 -0500] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:09 -0500] "GET /222.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:10 -0500] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:10 -0500] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:10 -0500] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:11 -0500] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:12 -0500] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:12 -0500] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:12 -0500] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:13 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:13 -0500] "GET //av.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:13 -0500] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:13 -0500] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:14 -0500] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:14 -0500] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:15 -0500] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:16 -0500] "GET //class.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:16 -0500] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:17 -0500] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:18 -0500] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:18 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:19 -0500] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:20 -0500] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:21 -0500] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:21 -0500] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:22 -0500] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:22 -0500] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:25 -0500] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:25 -0500] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:01 -0500] "GET /cbrfo.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:01 -0500] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:02 -0500] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:04 -0500] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:05 -0500] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:05 -0500] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:06 -0500] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:06 -0500] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:07 -0500] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:08 -0500] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:08 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:09 -0500] "GET /x/ HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:11 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:11 -0500] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:14 -0500] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:15 -0500] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:15 -0500] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:16 -0500] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:17 -0500] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:17 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:18 -0500] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:19 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:19 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:20 -0500] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:20 -0500] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:21 -0500] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:22 -0500] "GET /166.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:22 -0500] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:23 -0500] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:23 -0500] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:24 -0500] "GET /main.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:24 -0500] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:24 -0500] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:25 -0500] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 13.79.87.25 - - [20/Feb/2026:15:58:25 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:21 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:23 -0500] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:24 -0500] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:24 -0500] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:25 -0500] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:28 -0500] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:28 -0500] "GET /Wp-good.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:29 -0500] "GET /tphp.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:29 -0500] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:30 -0500] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:31 -0500] "GET //alfa.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:31 -0500] "GET //wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:33 -0500] "GET /rezor.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:34 -0500] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:36 -0500] "GET /sto.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:36 -0500] "GET //test.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:38 -0500] "GET /n3.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:39 -0500] "GET /o.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:40 -0500] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:40 -0500] "GET /.trash7309/f/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:41 -0500] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:42 -0500] "GET //h.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:42 -0500] "GET //skin/install/default/security.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:45 -0500] "GET /png.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:46 -0500] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:47 -0500] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:49 -0500] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:51 -0500] "GET /images/fk2e3/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:52 -0500] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:52 -0500] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:55 -0500] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:55 -0500] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:55 -0500] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:58 -0500] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:59 -0500] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:59 -0500] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:00 -0500] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:00 -0500] "GET /cool.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:01 -0500] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:01 -0500] "GET //elp.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:03 -0500] "GET //wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:03 -0500] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:03 -0500] "GET /.trash7309/fafa/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:24 -0500] "GET /2026.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:25 -0500] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:26 -0500] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:26 -0500] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:26 -0500] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:27 -0500] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:28 -0500] "GET /Update/f35.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:30 -0500] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:32 -0500] "GET /luxe.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:32 -0500] "GET /update/wpupex.php/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:33 -0500] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:34 -0500] "GET //wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:34 -0500] "GET //install.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:35 -0500] "GET /~norapump/hah.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:36 -0500] "GET //x.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:37 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:39 -0500] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:39 -0500] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:41 -0500] "GET //wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:41 -0500] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:43 -0500] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:43 -0500] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:43 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:44 -0500] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:47 -0500] "GET //wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:48 -0500] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:48 -0500] "GET /wp/wp-includes//index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:49 -0500] "GET //wso.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:52 -0500] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:53 -0500] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:54 -0500] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:56 -0500] "GET /WordPress/x/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:56 -0500] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:56 -0500] "GET //geck.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:57 -0500] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:58 -0500] "GET //admin/function.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:58 -0500] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:17:59 -0500] "GET /ftp.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:01 -0500] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:02 -0500] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:04 -0500] "GET /system.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:04 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:05 -0500] "GET /museu/yhweq.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:04 -0500] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:06 -0500] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:07 -0500] "GET /wp-miiss.php.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:07 -0500] "GET /ho/wpup.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:08 -0500] "GET /hey.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:09 -0500] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:10 -0500] "GET /apsarasarts/okk.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:11 -0500] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:11 -0500] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:12 -0500] "GET //about/function.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:12 -0500] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:12 -0500] "GET //wp-content/json.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:13 -0500] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:14 -0500] "GET /ps.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:15 -0500] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:16 -0500] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:18 -0500] "GET //user.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:18 -0500] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:19 -0500] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:20 -0500] "GET //wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:21 -0500] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:21 -0500] "GET //sad/about.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:22 -0500] "GET /oivcl.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:22 -0500] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:22 -0500] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:23 -0500] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:23 -0500] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:24 -0500] "GET //.cache/x.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:25 -0500] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:25 -0500] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:28 -0500] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:29 -0500] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:30 -0500] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:05 -0500] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:06 -0500] "GET //w.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:06 -0500] "GET /gib.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:08 -0500] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:08 -0500] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:09 -0500] "GET //1337.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:10 -0500] "GET //buy.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:11 -0500] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:13 -0500] "GET /hzz.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:13 -0500] "GET //content.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:14 -0500] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:16 -0500] "GET /.trash7309/dd/ HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:16 -0500] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:17 -0500] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:17 -0500] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:19 -0500] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:19 -0500] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:20 -0500] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:20 -0500] "GET //403.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:23 -0500] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:24 -0500] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:25 -0500] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:26 -0500] "GET /ioxi-o2.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:26 -0500] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:27 -0500] "GET /dlu.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:28 -0500] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:29 -0500] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:29 -0500] "GET //404.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:30 -0500] "GET /des.php HTTP/1.1" 301 795 "-" "-" 20.194.25.241 - - [20/Feb/2026:16:18:31 -0500] "GET //lufix.php HTTP/1.1" 301 795 "-" "-" 2a03:2880:f814:14:: - - [20/Feb/2026:16:30:48 -0500] "GET /sitemap-index.xml HTTP/1.1" 301 795 "-" "meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 15.235.98.68 - - [20/Feb/2026:16:34:47 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 51.161.37.0 - - [20/Feb/2026:16:34:50 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 169.150.203.240 - - [20/Feb/2026:16:50:28 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 216.244.66.194 - - [20/Feb/2026:17:13:01 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 51.107.69.151 - - [20/Feb/2026:17:17:47 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1251 "-" "-" 74.234.57.136 - - [20/Feb/2026:17:18:35 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1251 "-" "-" 74.234.57.136 - - [20/Feb/2026:17:18:35 -0500] "GET /byp8.php HTTP/1.1" 404 1251 "-" "-" 216.244.66.194 - - [20/Feb/2026:17:15:06 -0500] "GET /images/portfolio/srilankasuomitravels.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 51.107.69.151 - - [20/Feb/2026:17:17:47 -0500] "GET /byp8.php HTTP/1.1" 404 1251 "-" "-" 194.5.82.54 - - [20/Feb/2026:17:40:18 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:19 -0500] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:19 -0500] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:20 -0500] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:20 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:40:21 -0500] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:21 -0500] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:40:21 -0500] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:21 -0500] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:22 -0500] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:23 -0500] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:24 -0500] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:25 -0500] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:25 -0500] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:40:25 -0500] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:40:26 -0500] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:26 -0500] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:26 -0500] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:40:27 -0500] "GET /akcc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:40:28 -0500] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:40:28 -0500] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:18 -0500] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:19 -0500] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:20 -0500] "GET /num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:20 -0500] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:20 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:22 -0500] "GET /bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:22 -0500] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:22 -0500] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:40:23 -0500] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:23 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:40:24 -0500] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:24 -0500] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:24 -0500] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:25 -0500] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:26 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:40:27 -0500] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:27 -0500] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:27 -0500] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:28 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:40:29 -0500] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:40:28 -0500] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:29 -0500] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:30 -0500] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:40:31 -0500] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:32 -0500] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:33 -0500] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:40:33 -0500] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:34 -0500] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:40:34 -0500] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:40:34 -0500] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:35 -0500] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:35 -0500] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:36 -0500] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:40:36 -0500] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:40:37 -0500] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:37 -0500] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:37 -0500] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:37 -0500] "GET /inputs.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:38 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:38 -0500] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:40:29 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:29 -0500] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:30 -0500] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:40:30 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:31 -0500] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:31 -0500] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:31 -0500] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:40:32 -0500] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:32 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:33 -0500] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:33 -0500] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:40:34 -0500] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:35 -0500] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:35 -0500] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:36 -0500] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:36 -0500] "GET /vx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:38 -0500] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:38 -0500] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:39 -0500] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:40:39 -0500] "GET /abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:40:40 -0500] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:40 -0500] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:40:41 -0500] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:41 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:41 -0500] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:42 -0500] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:40:42 -0500] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:40:42 -0500] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:43 -0500] "GET /num.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:43 -0500] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:40:43 -0500] "GET /z.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:40:44 -0500] "GET /past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:44 -0500] "GET /.well-known/acme-challenge/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:40:44 -0500] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:45 -0500] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:45 -0500] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:46 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:46 -0500] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:40:46 -0500] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:47 -0500] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:48 -0500] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:49 -0500] "GET /nc4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:39 -0500] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:40 -0500] "GET /yas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:40 -0500] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:41 -0500] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:42 -0500] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:44 -0500] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:44 -0500] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:45 -0500] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:40:46 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:47 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:40:47 -0500] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:47 -0500] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:48 -0500] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:48 -0500] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:40:48 -0500] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:40:49 -0500] "GET /wp-content/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:49 -0500] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:49 -0500] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:50 -0500] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:49 -0500] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:40:50 -0500] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:50 -0500] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:51 -0500] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:40:52 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:52 -0500] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:52 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:53 -0500] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:40:53 -0500] "GET /asasx.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:54 -0500] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:40:54 -0500] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:54 -0500] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:54 -0500] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:55 -0500] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:40:55 -0500] "GET /api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:55 -0500] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:40:56 -0500] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:56 -0500] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:57 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:40:57 -0500] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:50 -0500] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:51 -0500] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:51 -0500] "GET /hilk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:40:52 -0500] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:53 -0500] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:55 -0500] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:56 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:56 -0500] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:57 -0500] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:58 -0500] "GET /about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:58 -0500] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:40:59 -0500] "GET /akcc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:41:00 -0500] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:02 -0500] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:02 -0500] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:41:03 -0500] "GET /rzki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:03 -0500] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:04 -0500] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:05 -0500] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:05 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:57 -0500] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:40:57 -0500] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:58 -0500] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:40:59 -0500] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:59 -0500] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:40:59 -0500] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:00 -0500] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:00 -0500] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:01 -0500] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:01 -0500] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:01 -0500] "GET /gg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:01 -0500] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:02 -0500] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:03 -0500] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:03 -0500] "GET /wp-conflg/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:04 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:41:04 -0500] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:04 -0500] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:05 -0500] "GET /wp-content/hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:05 -0500] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:06 -0500] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:06 -0500] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:07 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:08 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:08 -0500] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:08 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:09 -0500] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:10 -0500] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:11 -0500] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:11 -0500] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:12 -0500] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:41:12 -0500] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:12 -0500] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:12 -0500] "GET /wp-includes/sitemaps/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:13 -0500] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:13 -0500] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:13 -0500] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:15 -0500] "GET /ar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:16 -0500] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:16 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:06 -0500] "GET /admin.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:06 -0500] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:07 -0500] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:07 -0500] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:08 -0500] "GET /option-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:09 -0500] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:41:09 -0500] "GET /cord.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:10 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:10 -0500] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:10 -0500] "GET /wp-content/admin.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:11 -0500] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:11 -0500] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:41:12 -0500] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:15 -0500] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:16 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:17 -0500] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:18 -0500] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:41:18 -0500] "GET /wp-content/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:19 -0500] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:41:20 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:41:20 -0500] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:16 -0500] "GET /elp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:17 -0500] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:17 -0500] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:19 -0500] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:19 -0500] "GET /tx20.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:19 -0500] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:20 -0500] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:20 -0500] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:20 -0500] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:21 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:21 -0500] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:23 -0500] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:23 -0500] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:24 -0500] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:24 -0500] "GET /test1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:24 -0500] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:25 -0500] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:25 -0500] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:25 -0500] "GET /xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:26 -0500] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:26 -0500] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:21 -0500] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:22 -0500] "GET /wp-conflg/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:22 -0500] "GET /wp-content/plugins/ubh/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:23 -0500] "GET /asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:23 -0500] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:41:24 -0500] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:25 -0500] "GET /wp-includes/style-engine/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:26 -0500] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:41:27 -0500] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:27 -0500] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:28 -0500] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:29 -0500] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:29 -0500] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:29 -0500] "GET /wp-includes/block-supports/layout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:30 -0500] "GET /wp-content/plugins/linkpreview/j.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:30 -0500] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:30 -0500] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:31 -0500] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:31 -0500] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:26 -0500] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:27 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:41:27 -0500] "GET /a.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:28 -0500] "GET /ALFA_DATA/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:28 -0500] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:29 -0500] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:41:30 -0500] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:41:31 -0500] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:31 -0500] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:32 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:32 -0500] "GET /about.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:41:33 -0500] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:33 -0500] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:41:33 -0500] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:34 -0500] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:34 -0500] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:34 -0500] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:34 -0500] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:35 -0500] "GET /about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:37 -0500] "GET /tx24.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:37 -0500] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:32 -0500] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:32 -0500] "GET /wp-content/themes/pridmag/fr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:41:33 -0500] "GET /wp-includes/block-supports/generated-classname.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:35 -0500] "GET /10.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:35 -0500] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:35 -0500] "GET /wp-includes/js/tinymce/skins/alfa-rex.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:36 -0500] "GET /wp-content/themes/astra/inc/ki1k.php/js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:41:36 -0500] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:36 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:41:37 -0500] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:41:37 -0500] "GET /akc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:38 -0500] "GET /404.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:38 -0500] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:38 -0500] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:39 -0500] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:39 -0500] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:40 -0500] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:41 -0500] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:41 -0500] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:42 -0500] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:41:39 -0500] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:39 -0500] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:40 -0500] "GET /222.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:40 -0500] "GET /xxl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:41 -0500] "GET /sitemap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:41 -0500] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:42 -0500] "GET /build.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:42 -0500] "GET /wp-includes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:42 -0500] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:43 -0500] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:43 -0500] "GET /wp-content/themes/astra/inc/ki1k.ph HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:41:44 -0500] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:44 -0500] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:45 -0500] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:45 -0500] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:45 -0500] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:46 -0500] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:46 -0500] "GET /cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:46 -0500] "GET /.well-known/pki-validation/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:47 -0500] "GET /fm.php?fm=true HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:43 -0500] "GET /assets/images/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:43 -0500] "GET /p/wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:44 -0500] "GET /js/fm.php/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:44 -0500] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:46 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:47 -0500] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:47 -0500] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:47 -0500] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:48 -0500] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:48 -0500] "GET /.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:49 -0500] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:51 -0500] "GET /wso-x569.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:41:52 -0500] "GET /header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:53 -0500] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:53 -0500] "GET /wp-includes/Requests/Proxy/HTTP.term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:53 -0500] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:53 -0500] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:54 -0500] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:54 -0500] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:48 -0500] "GET /r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:41:48 -0500] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:49 -0500] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:41:49 -0500] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:49 -0500] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:41:50 -0500] "GET /wp-22.php?sxallsitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:50 -0500] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:50 -0500] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:51 -0500] "GET /smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:51 -0500] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:52 -0500] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:52 -0500] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:52 -0500] "GET /a1vx.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:54 -0500] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:54 -0500] "GET /wp-includes/block-supports/utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:55 -0500] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:55 -0500] "GET /kex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:56 -0500] "GET /function/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:56 -0500] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:55 -0500] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:41:56 -0500] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:57 -0500] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:57 -0500] "GET /wp-includes/pomo/db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:58 -0500] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:41:58 -0500] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:59 -0500] "GET /wp-content/plugins/erinyani/asasx.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:59 -0500] "GET /wp-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:00 -0500] "GET /wp-includes/SimplePie/ini_db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:00 -0500] "GET /tx17.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:01 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:01 -0500] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:42:02 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:02 -0500] "GET /dex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:03 -0500] "GET /.well-known/pki-validation/muse.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:03 -0500] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:04 -0500] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:05 -0500] "GET /Yanzmini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:06 -0500] "GET /0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:41:56 -0500] "GET /.well-known/pki-validation/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:57 -0500] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:41:57 -0500] "GET /wp-admin/custom-plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:41:58 -0500] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:58 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:41:59 -0500] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:41:59 -0500] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:00 -0500] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:01 -0500] "GET /about.php?520 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:02 -0500] "GET /footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:02 -0500] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:42:03 -0500] "GET /wp-includes/customize/sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:03 -0500] "GET /02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:03 -0500] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:04 -0500] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:42:04 -0500] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:42:05 -0500] "GET /app/webroot/filemanager.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:05 -0500] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:05 -0500] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:06 -0500] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:07 -0500] "GET /million.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:07 -0500] "GET /ava.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:07 -0500] "GET /wp-content/user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:08 -0500] "GET /system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:08 -0500] "GET /uplozvb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:09 -0500] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:42:09 -0500] "GET /network_xo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:10 -0500] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:11 -0500] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:42:11 -0500] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:11 -0500] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:42:12 -0500] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:42:12 -0500] "GET /classwithtostring.php/rbzccnnp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:42:13 -0500] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:13 -0500] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:14 -0500] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:15 -0500] "GET /.well-known/pki-validation/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:15 -0500] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:16 -0500] "GET /wp-includes/block-supports/custom-classname.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:16 -0500] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:42:06 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:07 -0500] "GET /wp-content/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:07 -0500] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:08 -0500] "GET /wp-content/themes/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:09 -0500] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:42:09 -0500] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:10 -0500] "GET /22.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:10 -0500] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:10 -0500] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:11 -0500] "GET /wp-admin/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:12 -0500] "GET /ioxi-rex4.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:42:12 -0500] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:13 -0500] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:13 -0500] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:14 -0500] "GET /klbnm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:14 -0500] "GET /wp-content/themes/pridmag/install.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:42:15 -0500] "GET /lock360.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:15 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:16 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:42:17 -0500] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:18 -0500] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:18 -0500] "GET /v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:19 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:19 -0500] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:19 -0500] "GET /tyasd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:20 -0500] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:20 -0500] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:42:20 -0500] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:42:21 -0500] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:21 -0500] "GET /ioxi002.PhP7/wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:22 -0500] "GET /xtride.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:22 -0500] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:22 -0500] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:22 -0500] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:23 -0500] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:23 -0500] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:23 -0500] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:24 -0500] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:24 -0500] "GET /t.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:16 -0500] "GET /.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:17 -0500] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:17 -0500] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:17 -0500] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:18 -0500] "GET /wp-includes/SimplePie/db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:18 -0500] "GET /k.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:42:19 -0500] "GET /22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:20 -0500] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:21 -0500] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:21 -0500] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:42:23 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:24 -0500] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:25 -0500] "GET /koko.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:26 -0500] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:26 -0500] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:26 -0500] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:28 -0500] "GET /backup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:28 -0500] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:29 -0500] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:29 -0500] "GET /asgoxtyad2mjhno6ds4ikvhdCakc128.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:24 -0500] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:42:25 -0500] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:42:25 -0500] "GET /ioxi2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:42:25 -0500] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:26 -0500] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:27 -0500] "GET /wp-includes/Requests/src/Hooks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:27 -0500] "GET /wp-admin/fmadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:27 -0500] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:27 -0500] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:42:28 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:28 -0500] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:29 -0500] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:29 -0500] "GET /404.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:31 -0500] "GET /wp-content/plugins/wp-file-manager/file_folder_manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:31 -0500] "GET /index/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:31 -0500] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:32 -0500] "GET /help.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:32 -0500] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:32 -0500] "GET /wp-includes/css/db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:33 -0500] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:42:34 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:34 -0500] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:35 -0500] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:35 -0500] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:36 -0500] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:36 -0500] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:37 -0500] "GET /wp-content/themes/admin.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:42:38 -0500] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:38 -0500] "GET /mln.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:39 -0500] "GET /vx.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:42:39 -0500] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:39 -0500] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:42:40 -0500] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:40 -0500] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:40 -0500] "GET /wp-content/themes/tflow/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:41 -0500] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:41 -0500] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:41 -0500] "GET /jga.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:42:42 -0500] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:42 -0500] "GET /xy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:29 -0500] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:42:30 -0500] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:30 -0500] "GET /gtc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:30 -0500] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:31 -0500] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:42:33 -0500] "GET /av.php%20s HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:33 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:33 -0500] "GET /footers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:34 -0500] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:35 -0500] "GET /wp-content/plugins/mainhosting/asasx.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:35 -0500] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:36 -0500] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:36 -0500] "GET /aaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:37 -0500] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:37 -0500] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:38 -0500] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:38 -0500] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:39 -0500] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:42:40 -0500] "GET /u.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:42 -0500] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:42 -0500] "GET /okxh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:43 -0500] "GET /wp-includes/pomo/bru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:45 -0500] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:46 -0500] "GET /chosen/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:47 -0500] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:48 -0500] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:48 -0500] "GET /wp-includes/images/smilies/about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:48 -0500] "GET /e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:48 -0500] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:49 -0500] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:50 -0500] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:50 -0500] "GET /wp-content/plugins/mainhosting/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:50 -0500] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:51 -0500] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:42:51 -0500] "GET /wp-admin/images/Mhbgf.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:51 -0500] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:51 -0500] "GET /fie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:43 -0500] "GET /.well-known/pki-validation/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:43 -0500] "GET /j.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:43 -0500] "GET /wp-includes/blocks/tag-cloud/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:44 -0500] "GET /wp-user.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:44 -0500] "GET /.well-known/acme-challenge/muse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:44 -0500] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:44 -0500] "GET /gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:45 -0500] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:45 -0500] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:42:45 -0500] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:46 -0500] "GET /wp-includes/theme-compat/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:42:46 -0500] "GET /root.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:46 -0500] "GET /bolt.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:47 -0500] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:47 -0500] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:47 -0500] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:49 -0500] "GET /wp-includes/PHPMailer/PHPMailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:49 -0500] "GET /9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:50 -0500] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:52 -0500] "GET /wp-includes/Requests/src/HookManager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:52 -0500] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:53 -0500] "GET /layout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:53 -0500] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:54 -0500] "GET /wp-content/themes/alera/alpha.php?u?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:54 -0500] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:42:54 -0500] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:55 -0500] "GET /wp-includes/ID3/ini_user-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:55 -0500] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:56 -0500] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:56 -0500] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:57 -0500] "GET /ioxi-rex5.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:42:57 -0500] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:42:58 -0500] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:59 -0500] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:42:59 -0500] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:00 -0500] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:00 -0500] "GET /browse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:02 -0500] "GET /up4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:02 -0500] "GET /wp-includes/Requests/src/Utility/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:52 -0500] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:52 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:53 -0500] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:54 -0500] "GET /ioxi-rex3.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:55 -0500] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:55 -0500] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:56 -0500] "GET /wp-includes/js/500.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:56 -0500] "GET /kly1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:42:57 -0500] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:58 -0500] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:42:58 -0500] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:42:58 -0500] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:42:59 -0500] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:42:59 -0500] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:00 -0500] "GET /wp-includes/ID3/user-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:00 -0500] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:01 -0500] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:01 -0500] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:01 -0500] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:02 -0500] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:03 -0500] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:43:03 -0500] "GET /wp-includes/SimplePie/Registry.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:04 -0500] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:04 -0500] "GET /goods.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:43:05 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:05 -0500] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:06 -0500] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:43:06 -0500] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:07 -0500] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:07 -0500] "GET /ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:07 -0500] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:08 -0500] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:43:09 -0500] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:43:09 -0500] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:10 -0500] "GET /assets/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:10 -0500] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:11 -0500] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:12 -0500] "GET /admin.php?fm=true HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:12 -0500] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:12 -0500] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:02 -0500] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:03 -0500] "GET /zz.php/wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:03 -0500] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:43:04 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:04 -0500] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:43:05 -0500] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:05 -0500] "GET /wp-includes/pomo/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:06 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:07 -0500] "GET /file.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:08 -0500] "GET /wp-includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:43:08 -0500] "GET /wb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:08 -0500] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:09 -0500] "GET /wander.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:09 -0500] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:10 -0500] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:10 -0500] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:11 -0500] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:43:11 -0500] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:11 -0500] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:12 -0500] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:13 -0500] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:43:13 -0500] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:14 -0500] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:14 -0500] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:15 -0500] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:16 -0500] "GET /wp-content/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:16 -0500] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:16 -0500] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:17 -0500] "GET /.well-known/pki-validation/nxc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:17 -0500] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:19 -0500] "GET /wp/wp-content/themes/twentytwentyfive/wpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:19 -0500] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:20 -0500] "GET /file.php?fm=true HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:21 -0500] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:43:22 -0500] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:22 -0500] "GET /img/nxc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:22 -0500] "GET /f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:23 -0500] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:23 -0500] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:23 -0500] "GET /akc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:13 -0500] "GET /al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.54 - - [20/Feb/2026:17:43:13 -0500] "GET /uploxe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:14 -0500] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:15 -0500] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:15 -0500] "GET /pvafcbhg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:43:15 -0500] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:17 -0500] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:17 -0500] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:18 -0500] "GET /man.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:43:18 -0500] "GET /batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:18 -0500] "GET /wp-content/uploads/2018/12/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:19 -0500] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:19 -0500] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:19 -0500] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:20 -0500] "GET /test.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:20 -0500] "GET /gfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:21 -0500] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:21 -0500] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:21 -0500] "GET /upload/JustBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:22 -0500] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:24 -0500] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:24 -0500] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:25 -0500] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:43:25 -0500] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:25 -0500] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:26 -0500] "GET /wp-content/plugins/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:26 -0500] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:27 -0500] "GET /signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:43:27 -0500] "GET /7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:28 -0500] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:28 -0500] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:29 -0500] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:30 -0500] "GET /nakrip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:30 -0500] "GET /yox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:31 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:31 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:43:32 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:32 -0500] "GET /wp-content/wp-conflg.php?p=/wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:33 -0500] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:23 -0500] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:24 -0500] "GET /adin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:24 -0500] "GET /wp-content/plugins/apikey/1.php?f=f HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:43:25 -0500] "GET /wp-content/lock11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:26 -0500] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:26 -0500] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:27 -0500] "GET /wp-lock.php?fm=true HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:27 -0500] "GET /beence.php/wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:28 -0500] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:28 -0500] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:29 -0500] "GET /we.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:43:29 -0500] "GET /wp-content/nxc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:30 -0500] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:30 -0500] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:43:31 -0500] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:31 -0500] "GET /8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:32 -0500] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:32 -0500] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:34 -0500] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:35 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:33 -0500] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:43:33 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:33 -0500] "GET /wp-includes/Requests/src/Requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:34 -0500] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:34 -0500] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:36 -0500] "GET /jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:36 -0500] "GET /asus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:36 -0500] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:36 -0500] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:37 -0500] "GET /wp-content/themes/user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:37 -0500] "GET /wp-includes/block-bindings/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:38 -0500] "GET /wp-includes/Requests/about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:38 -0500] "GET /send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:38 -0500] "GET /wp-acc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:39 -0500] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:41 -0500] "GET /g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:41 -0500] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:42 -0500] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:42 -0500] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:42 -0500] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:35 -0500] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:43:35 -0500] "GET /wp-includes/SimplePie/HTTP/Parser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:35 -0500] "GET /khgdl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:43:37 -0500] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:37 -0500] "GET /wp-content/themes/pridmag/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:43:38 -0500] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:39 -0500] "GET /.p.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:39 -0500] "GET /wp-content/1.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:40 -0500] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:40 -0500] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:40 -0500] "GET /shell.php5 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:43:40 -0500] "GET /wp-includes/js/tinymce/plugins/wptextpattern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:41 -0500] "GET /wp-loccs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:41 -0500] "GET /1.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:43 -0500] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:44 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:44 -0500] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:45 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:43:45 -0500] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:43:46 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:42 -0500] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:43 -0500] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:43 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:43 -0500] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:44 -0500] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:44 -0500] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:45 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:45 -0500] "GET /assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:46 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:46 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:47 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:47 -0500] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:47 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:48 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:48 -0500] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:49 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:49 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:43:50 -0500] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:51 -0500] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:52 -0500] "GET /private/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:43:47 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:43:48 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:48 -0500] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:49 -0500] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:49 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:43:50 -0500] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:43:50 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:51 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:51 -0500] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:52 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:52 -0500] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:53 -0500] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:53 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:54 -0500] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:54 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:43:55 -0500] "GET /wp-content/up HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:55 -0500] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:55 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:55 -0500] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:56 -0500] "GET /php/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:52 -0500] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:43:53 -0500] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:53 -0500] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:54 -0500] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:56 -0500] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:57 -0500] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:43:57 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:57 -0500] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:58 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:58 -0500] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:43:59 -0500] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:59 -0500] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.54 - - [20/Feb/2026:17:44:00 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:44:00 -0500] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:44:01 -0500] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:01 -0500] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:02 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:44:02 -0500] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:44:03 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:03 -0500] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:43:56 -0500] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:56 -0500] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:57 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:58 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:58 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:43:59 -0500] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:00 -0500] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:00 -0500] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:44:01 -0500] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:02 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:02 -0500] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:44:03 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:04 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:05 -0500] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:05 -0500] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:05 -0500] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:06 -0500] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:06 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.54 - - [20/Feb/2026:17:44:06 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:07 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:03 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:44:04 -0500] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:04 -0500] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:04 -0500] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:05 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:06 -0500] "GET /vendor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:44:07 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:08 -0500] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:09 -0500] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:44:10 -0500] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:10 -0500] "GET /local/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:44:11 -0500] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:11 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:12 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:12 -0500] "GET /images/stories/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:12 -0500] "GET /Site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.54 - - [20/Feb/2026:17:44:13 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:44:13 -0500] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:14 -0500] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:14 -0500] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:07 -0500] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:07 -0500] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:08 -0500] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:08 -0500] "GET /tinyfilemanager HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:08 -0500] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:09 -0500] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:09 -0500] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:09 -0500] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.54 - - [20/Feb/2026:17:44:10 -0500] "GET /shop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:44:10 -0500] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.54 - - [20/Feb/2026:17:44:11 -0500] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:11 -0500] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:12 -0500] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:13 -0500] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:15 -0500] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:16 -0500] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:17 -0500] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:44:18 -0500] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:18 -0500] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:19 -0500] "GET /docs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:44:14 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:14 -0500] "GET /system/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:44:15 -0500] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:44:15 -0500] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:15 -0500] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:16 -0500] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:16 -0500] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:44:16 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:17 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:17 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:18 -0500] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:18 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.54 - - [20/Feb/2026:17:44:19 -0500] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:19 -0500] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:20 -0500] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:44:20 -0500] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:44:20 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:44:21 -0500] "GET /aspera/faspex/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:44:22 -0500] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:22 -0500] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:19 -0500] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.54 - - [20/Feb/2026:17:44:20 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.54 - - [20/Feb/2026:17:44:21 -0500] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:21 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:44:23 -0500] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:23 -0500] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.54 - - [20/Feb/2026:17:44:24 -0500] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.54 - - [20/Feb/2026:17:44:25 -0500] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.54 - - [20/Feb/2026:17:44:22 -0500] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:44:22 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.54 - - [20/Feb/2026:17:44:23 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:24 -0500] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:24 -0500] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.54 - - [20/Feb/2026:17:44:24 -0500] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.54 - - [20/Feb/2026:17:44:25 -0500] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 172.190.142.176 - - [20/Feb/2026:18:00:26 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:27 -0500] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:27 -0500] "GET //wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:27 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:27 -0500] "GET //wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:27 -0500] "GET //x.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:28 -0500] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:28 -0500] "GET /okxh.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:28 -0500] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:28 -0500] "GET //zqhfn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:29 -0500] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:29 -0500] "GET /maul.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:30 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:30 -0500] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:31 -0500] "GET //an.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:31 -0500] "GET //orouu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:31 -0500] "GET /config.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:31 -0500] "GET //z.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:31 -0500] "GET /55b76.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:32 -0500] "GET //wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:32 -0500] "GET /web.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:33 -0500] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:33 -0500] "GET //byp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:33 -0500] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:34 -0500] "GET /clss.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:34 -0500] "GET //wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:35 -0500] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:35 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:37 -0500] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:37 -0500] "GET //gdn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:37 -0500] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:38 -0500] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:38 -0500] "GET /rzki.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:38 -0500] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:39 -0500] "GET //function/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:40 -0500] "GET //admin/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:41 -0500] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:41 -0500] "GET //wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:41 -0500] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:41 -0500] "GET /wp-content/languages/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:26 -0500] "GET //wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:28 -0500] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:28 -0500] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:29 -0500] "GET /k.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:29 -0500] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:29 -0500] "GET //403.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:29 -0500] "GET //fimai.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:30 -0500] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:30 -0500] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:32 -0500] "GET //kalso.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:32 -0500] "GET /5b9ac.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:32 -0500] "GET //system.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:33 -0500] "GET //wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:33 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:33 -0500] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:34 -0500] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:34 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:34 -0500] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:35 -0500] "GET /zc-104.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:35 -0500] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:35 -0500] "GET /vanda.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:36 -0500] "GET //install.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:36 -0500] "GET //wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:37 -0500] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:37 -0500] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:38 -0500] "GET //css/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:38 -0500] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:38 -0500] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:39 -0500] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:39 -0500] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:39 -0500] "GET //wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:40 -0500] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:40 -0500] "GET /44.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:40 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:40 -0500] "GET /404.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:40 -0500] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:41 -0500] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:41 -0500] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:41 -0500] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:42 -0500] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:42 -0500] "GET /images/all.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:42 -0500] "GET //404.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:43 -0500] "GET //rip.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:43 -0500] "GET //h.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:43 -0500] "GET /56c53.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:44 -0500] "GET /i.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:44 -0500] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:44 -0500] "GET /chosen/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:45 -0500] "GET /144.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:45 -0500] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:45 -0500] "GET /lm15.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:46 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:46 -0500] "GET /d12.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:46 -0500] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:47 -0500] "GET /bo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:47 -0500] "GET /a5e0a.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:42 -0500] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:42 -0500] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:42 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:43 -0500] "GET //wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:43 -0500] "GET /wp-admin/user-new.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:44 -0500] "GET /varb.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:44 -0500] "GET //xxzdc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:44 -0500] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:44 -0500] "GET //elp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:45 -0500] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:45 -0500] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:45 -0500] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:46 -0500] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:46 -0500] "GET //test.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:46 -0500] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:47 -0500] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [20/Feb/2026:18:00:47 -0500] "GET /z.php HTTP/1.1" 301 795 "-" "-" 220.181.108.101 - - [20/Feb/2026:18:10:35 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux;u;Android 4.2.2;zh-cn;) AppleWebKit/534.46 (KHTML,like Gecko) Version/5.1 Mobile Safari/10600.6.3 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.88 - - [20/Feb/2026:18:10:35 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.49 - - [20/Feb/2026:18:10:36 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 221.229.106.25 - - [20/Feb/2026:18:32:33 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [20/Feb/2026:18:44:53 -0500] "GET /images/portfolio/hikkachatvillas.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/magnific-popup/jquery.magnific-popup.min.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/jquery.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/jquery.modernizr.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/sequence/jquery.sequence.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/custom.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/config.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/jquery.modernizr.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/plugins.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/plugins/min/jquery.mixitup-min.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/plugins.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/owl-carousel/owl.carousel.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/magnific-popup/jquery.magnific-popup.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/custom.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:56 -0500] "GET /.env.bak HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:58 -0500] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 216.244.66.194 - - [20/Feb/2026:18:42:42 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 195.178.110.223 - - [20/Feb/2026:18:54:54 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/plugins/min/jquery.mixitup-min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/plugins/min/jquery.easing.1.3-min.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/owl-carousel/owl.carousel.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/sequence/jquery.sequence.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/plugins/min/jquery.easing.1.3-min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/jquery.min.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/jquery.selectivizr.min.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/jquery.selectivizr.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/config.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /js/respond.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:55 -0500] "GET /%22js/respond.min.js%22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:56 -0500] "GET /.env.save HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:57 -0500] "GET /.env.backup HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:57 -0500] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:58 -0500] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:59 -0500] "GET /aws-config.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:00 -0500] "GET /aws.config.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:54:58 -0500] "GET /config.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:01 -0500] "GET /debugbar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:01 -0500] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:02 -0500] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:02 -0500] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:02 -0500] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:03 -0500] "GET /.aws/config HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 195.178.110.223 - - [20/Feb/2026:18:55:03 -0500] "GET /aws-credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:04 -0500] "GET /.s3cfg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:00 -0500] "GET /_debugbar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:01 -0500] "GET /debug/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [20/Feb/2026:18:55:03 -0500] "GET /aws.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.163.206.70 - - [20/Feb/2026:18:58:06 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.193.228.15 - - [20/Feb/2026:19:35:17 -0500] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:19 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:19 -0500] "GET /about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:20 -0500] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:20 -0500] "GET /system.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:21 -0500] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:21 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:22 -0500] "GET //wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:22 -0500] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:23 -0500] "GET /content.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:26 -0500] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:27 -0500] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:28 -0500] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:29 -0500] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:30 -0500] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:31 -0500] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:32 -0500] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:33 -0500] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:34 -0500] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:34 -0500] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:35 -0500] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:35 -0500] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:36 -0500] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:37 -0500] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:38 -0500] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:38 -0500] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:39 -0500] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:39 -0500] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:40 -0500] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:42 -0500] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:43 -0500] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:43 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:44 -0500] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:45 -0500] "GET /st.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:49 -0500] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:50 -0500] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:51 -0500] "GET /403.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:52 -0500] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:52 -0500] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:53 -0500] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:53 -0500] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:54 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:13 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:17 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:17 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:18 -0500] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:19 -0500] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:23 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:24 -0500] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:25 -0500] "GET /FII.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:25 -0500] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:26 -0500] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:27 -0500] "GET /api.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:28 -0500] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:29 -0500] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:30 -0500] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:31 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:32 -0500] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:33 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:37 -0500] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:40 -0500] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:41 -0500] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:42 -0500] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:44 -0500] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:45 -0500] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:46 -0500] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:46 -0500] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:47 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:47 -0500] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:48 -0500] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:48 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:49 -0500] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:50 -0500] "GET /core.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:55 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:55 -0500] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:56 -0500] "GET /edit.phphttps://win55.bike/ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:57 -0500] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:57 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:59 -0500] "GET /error.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:00 -0500] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:01 -0500] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:01 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:54 -0500] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:56 -0500] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:56 -0500] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:58 -0500] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:58 -0500] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:35:59 -0500] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:00 -0500] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:02 -0500] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:02 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:03 -0500] "GET /kyami.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:03 -0500] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:04 -0500] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:05 -0500] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:06 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:07 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:07 -0500] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:08 -0500] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:09 -0500] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:10 -0500] "GET /ioxi-o.phphttps://forower.io/ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:11 -0500] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:12 -0500] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:13 -0500] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:13 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:13 -0500] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:14 -0500] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:15 -0500] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:15 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:16 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:17 -0500] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:17 -0500] "GET /wp-corn-sample.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:18 -0500] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:21 -0500] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:21 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:22 -0500] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:22 -0500] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:23 -0500] "GET /upload/login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:25 -0500] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:26 -0500] "GET /wp-includes/Text/lv.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:28 -0500] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:29 -0500] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:29 -0500] "GET /class-php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:32 -0500] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:05 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:06 -0500] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:07 -0500] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:08 -0500] "GET /item.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:09 -0500] "GET /config.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:10 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:11 -0500] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:12 -0500] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:14 -0500] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:16 -0500] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:17 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:18 -0500] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:19 -0500] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:19 -0500] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:20 -0500] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:20 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:21 -0500] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:23 -0500] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:24 -0500] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:26 -0500] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:26 -0500] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:27 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:28 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:30 -0500] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:31 -0500] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:31 -0500] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:32 -0500] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:32 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:33 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:34 -0500] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:35 -0500] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:36 -0500] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:37 -0500] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:38 -0500] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:38 -0500] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:39 -0500] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:40 -0500] "GET /wp-content/plugins/wpsearch/login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:41 -0500] "GET /123.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:42 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:43 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:44 -0500] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:33 -0500] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:34 -0500] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:35 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:36 -0500] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:37 -0500] "GET /css.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:39 -0500] "GET /wp-includes/php-compat/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:40 -0500] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:41 -0500] "GET /log.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:42 -0500] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:43 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:43 -0500] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:44 -0500] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:46 -0500] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:47 -0500] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:48 -0500] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:48 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:49 -0500] "GET /main.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:50 -0500] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:50 -0500] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:51 -0500] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:53 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:54 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:54 -0500] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:55 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:55 -0500] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:56 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 4.232.88.90 - - [20/Feb/2026:19:36:56 -0500] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:56 -0500] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:57 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:59 -0500] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:01 -0500] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:03 -0500] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:04 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:06 -0500] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:08 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:09 -0500] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:12 -0500] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:14 -0500] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:14 -0500] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:15 -0500] "GET /help.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:16 -0500] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:30 -0500] "GET /news.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:45 -0500] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:45 -0500] "GET /style.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:46 -0500] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:47 -0500] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:49 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:49 -0500] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:51 -0500] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:52 -0500] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:52 -0500] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:53 -0500] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 4.232.88.90 - - [20/Feb/2026:19:36:55 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:57 -0500] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:57 -0500] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:58 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:36:59 -0500] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:00 -0500] "GET /admin.phphttps://www-vn500.com/inputs.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:03 -0500] "GET /default.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:05 -0500] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:06 -0500] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:07 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:07 -0500] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:08 -0500] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:09 -0500] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:10 -0500] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:10 -0500] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:11 -0500] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:13 -0500] "GET /akc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:13 -0500] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:13 -0500] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:15 -0500] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:16 -0500] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:17 -0500] "GET /wp-content/et-cache/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:31 -0500] "GET /new.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:31 -0500] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:33 -0500] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:33 -0500] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:34 -0500] "GET /server.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:35 -0500] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:36 -0500] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:37 -0500] "GET /class.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:37 -0500] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:38 -0500] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:39 -0500] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:40 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:30 -0500] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:32 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:34 -0500] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:35 -0500] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:38 -0500] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:39 -0500] "GET /server.status HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:40 -0500] "GET /special.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [20/Feb/2026:19:37:41 -0500] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 34.222.236.195 - - [20/Feb/2026:20:00:36 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 134.122.133.31 - - [20/Feb/2026:19:49:56 -0500] "GET / HTTP/1.1" 301 795 "http://sublime.lk" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html\\xa1\\xb1)" 34.221.80.179 - - [20/Feb/2026:20:03:37 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 116.76.39.221 - - [20/Feb/2026:20:05:10 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4096.83 Safari/537.36 Edge/18.18362" 87.236.176.32 - - [20/Feb/2026:20:43:46 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 4.232.90.25 - - [20/Feb/2026:20:46:09 -0500] "GET /9.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:09 -0500] "GET /70.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:10 -0500] "GET /y.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:11 -0500] "GET /i.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:12 -0500] "GET /p.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:06 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:10 -0500] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:10 -0500] "GET /19.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:11 -0500] "GET /86.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:11 -0500] "GET /v.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:12 -0500] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:12 -0500] "GET /t.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:13 -0500] "GET /e.php HTTP/1.1" 301 795 "-" "-" 4.232.90.25 - - [20/Feb/2026:20:46:13 -0500] "GET /5.php HTTP/1.1" 301 795 "-" "-" 54.37.118.91 - - [20/Feb/2026:21:15:50 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 185.177.72.13 - - [20/Feb/2026:21:26:14 -0500] "GET /js/jquery.modernizr.js HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.13 - - [20/Feb/2026:21:26:20 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.56 - - [20/Feb/2026:21:27:54 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.51 - - [20/Feb/2026:21:28:07 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.56 - - [20/Feb/2026:21:28:09 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 142.44.228.215 - - [20/Feb/2026:21:15:53 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 18.219.131.181 - - [20/Feb/2026:21:17:40 -0500] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 18.219.131.181 - - [20/Feb/2026:21:17:40 -0500] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 18.219.131.181 - - [20/Feb/2026:21:17:41 -0500] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.177.72.52 - - [20/Feb/2026:21:20:21 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.52 - - [20/Feb/2026:21:23:27 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.52 - - [20/Feb/2026:21:23:45 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.13 - - [20/Feb/2026:21:26:33 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.38 - - [20/Feb/2026:21:26:50 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.30 - - [20/Feb/2026:21:26:57 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.38 - - [20/Feb/2026:21:27:00 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.30 - - [20/Feb/2026:21:27:08 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.38 - - [20/Feb/2026:21:27:19 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 185.177.72.51 - - [20/Feb/2026:21:28:19 -0500] "GET / HTTP/1.1" 301 795 "-" "curl/8.7.1" 216.244.66.194 - - [20/Feb/2026:21:43:42 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.194 - - [20/Feb/2026:21:45:47 -0500] "GET /images/portfolio/omegatourssrilanka.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.194 - - [20/Feb/2026:21:45:52 -0500] "GET /images/portfolio/sri-lanka-round-tours.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 2a03:2880:f814:2b:: - - [20/Feb/2026:23:12:17 -0500] "GET /sitemap.html HTTP/1.1" 301 795 "-" "meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.130.37.243 - - [20/Feb/2026:23:00:25 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [20/Feb/2026:23:22:38 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 2a03:2880:16ff:: - - [20/Feb/2026:23:32:45 -0500] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 216.244.66.194 - - [20/Feb/2026:23:24:30 -0500] "GET /images/portfolio/trincomaleediving.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 54.183.64.167 - - [21/Feb/2026:00:02:54 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 120.71.59.24 - - [21/Feb/2026:00:22:05 -0500] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"