Linux amd.servercpanel.com 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64
LiteSpeed
Server IP : 161.248.188.165 & Your IP : 216.73.216.219
Domains :
Cant Read [ /etc/named.conf ]
User : oishifashion
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
usr /
local /
apache /
domlogs /
oishifashion /
Delete
Unzip
Name
Size
Permission
Date
Action
12ap.oishifashion.com
53.37
KB
-rw-r-----
2025-12-25 01:39
12ap.oishifashion.com-ssl_log
525.96
KB
-rw-r-----
2025-12-25 04:00
ap.oishifashion.com
39.25
KB
-rw-r-----
2025-12-24 16:49
ap.oishifashion.com-ssl_log
177.66
MB
-rw-r-----
2025-12-25 04:07
ap.tsgbd.com
157.53
KB
-rw-r-----
2025-12-25 03:52
ap.tsgbd.com-ssl_log
647
KB
-rw-r-----
2025-12-25 04:05
ap.tsgbd.com.oishifashion.com
0
B
-rw-r-----
2025-08-12 12:39
ap.tsgbd.com.oishifashion.com-ssl_log
0
B
-rw-r-----
2025-08-12 12:39
ap99.tsgbd.com
152.12
KB
-rw-r-----
2025-12-25 03:02
ap99.tsgbd.com-ssl_log
38.21
KB
-rw-r-----
2025-12-25 03:35
drug.oishifashion.com
53.4
KB
-rw-r-----
2025-12-25 01:05
drug.oishifashion.com-ssl_log
51.19
KB
-rw-r-----
2025-12-25 03:10
etp.oishifashion.com
34.82
KB
-rw-r-----
2025-12-25 01:05
etp.oishifashion.com-ssl_log
328.77
KB
-rw-r-----
2025-12-25 04:05
oishifashion.com
234.98
KB
-rw-r-----
2025-12-25 03:35
oishifashion.com-ssl_log
1.25
MB
-rw-r-----
2025-12-25 03:52
pharmacy.oishifashion.com
58.97
KB
-rw-r-----
2025-12-25 01:05
pharmacy.oishifashion.com-ssl_log
2.67
MB
-rw-r-----
2025-12-25 04:05
tmds.tsgbd.com
544
B
-rw-r-----
2025-12-25 00:49
tmds.tsgbd.com-ssl_log
248.47
KB
-rw-r-----
2025-12-25 03:52
tsgbd.com.oishifashion.com
302.31
KB
-rw-r-----
2025-12-25 03:52
tsgbd.com.oishifashion.com-ssl_log
284.21
KB
-rw-r-----
2025-12-25 03:58
tssms.tsgbd.com
138.8
KB
-rw-r-----
2025-12-25 03:52
tssms.tsgbd.com-ssl_log
1.16
MB
-rw-r-----
2025-12-25 04:05
tt.oishifashion.com
46.29
KB
-rw-r-----
2025-12-25 01:05
tt.oishifashion.com-ssl_log
472.89
KB
-rw-r-----
2025-12-25 04:01
Save
Rename
54.166.85.94 - - [24/Dec/2025:19:05:41 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 44.255.20.39 - - [24/Dec/2025:19:12:57 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0" 79.127.132.58 - - [24/Dec/2025:19:24:48 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 79.127.132.58 - - [24/Dec/2025:19:24:49 +0600] "GET / HTTP/1.1" 301 795 "-" "l9tcpid/v1.1.0" 141.148.153.213 - - [24/Dec/2025:19:19:26 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" 185.242.177.54 - - [24/Dec/2025:19:44:39 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" 104.143.95.0 - - [24/Dec/2025:20:06:26 +0600] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 34.96.47.104 - - [25/Dec/2025:03:23:15 +0600] "GET /favicon.ico HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 35.187.132.108 - - [25/Dec/2025:03:23:14 +0600] "HEAD / HTTP/1.1" 301 0 "http://tssms.tsgbd.com" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 13.58.109.37 - - [25/Dec/2025:03:23:14 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 3.148.169.79 - - [25/Dec/2025:03:23:14 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 35.187.132.108 - - [25/Dec/2025:03:23:25 +0600] "HEAD / HTTP/1.1" 301 0 "http://tssms.tsgbd.com" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 34.72.176.129 - - [25/Dec/2025:04:24:52 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 205.169.39.58 - - [25/Dec/2025:04:24:11 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 104.197.69.115 - - [25/Dec/2025:04:24:13 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 66.81.162.175 - - [25/Dec/2025:04:27:57 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36" 34.72.176.129 - - [25/Dec/2025:04:24:04 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 173.239.203.135 - - [25/Dec/2025:04:28:21 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" 34.168.50.18 - - [25/Dec/2025:04:31:22 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 34.72.176.129 - - [25/Dec/2025:04:25:00 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 40.88.21.235 - - [25/Dec/2025:04:24:27 +0600] "GET / HTTP/1.1" 301 795 "http://tssms.tsgbd.com/" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 40.88.21.235 - - [25/Dec/2025:04:24:30 +0600] "GET /favicon.ico HTTP/1.1" 301 795 "http://tssms.tsgbd.com/favicon.ico" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 88.217.180.92 - - [25/Dec/2025:04:40:39 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPod; U; CPU iPhone OS 4_0 like Mac OS X; nn-NO) AppleWebKit/532.12.7 (KHTML, like Gecko) Version/4.0.5 Mobile/8B114 Safari/6532.12.7" 88.217.180.92 - - [25/Dec/2025:04:42:39 +0600] "GET /M9LQJ8YZ0GfD83Iuc8c HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:46 +0600] "GET /9fd2lQ52WeH9MMKLOH.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:48 +0600] "GET /Cq9RFd3COeFl9iS2HF.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:49 +0600] "GET /ioxi22.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:53 +0600] "GET /8EgpmrWK7_TuQLTUD.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:53 +0600] "GET /HJdiDeaStjqfTH7zcg.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:55 +0600] "GET /a2LOiRRtRwjk5jpo4M.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:59 +0600] "GET /MyWbKw68iEaQLhNNf.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:02 +0600] "GET /.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:05 +0600] "GET /cloud.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:10 +0600] "GET /rEKM3owf9WCusJCGqY.ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:13 +0600] "GET /tunnel.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:17 +0600] "GET /wm_cfshared.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:19 +0600] "GET /Thumbs.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:20 +0600] "GET /greeting.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:21 +0600] "GET /cmd-prow.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:23 +0600] "GET /idpost.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:24 +0600] "GET /20170219.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:40:00 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:38 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:41 +0600] "GET /jjaKMhRCDwy_L0O4t.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:46 +0600] "GET /XYjvamD_nB3Qv78X9BC.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:47 +0600] "GET /ki7kRXeBqSpu8CxD0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:48 +0600] "GET /9a5EKNtlKZ2qe6yJdQh.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:51 +0600] "GET /xvRN8ACyz6DKG6gXtE.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:52 +0600] "GET /HfmUHlGUXD8Mjx96wTG.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:56 +0600] "GET /Zq3B1D_xIDTcx3j8F1f.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:00 +0600] "GET /jbfka0aIsptGotqLYRm.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:03 +0600] "GET /AfWw0jqfDM358yKM0S.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:04 +0600] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:05 +0600] "GET /readme.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:07 +0600] "GET /QRa1BP_Ucope1MoIa.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:12 +0600] "GET /gmVstcLAiiLwC6nmda7.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:26 +0600] "GET /HitCount.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:27 +0600] "GET /HelpSessions.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:29 +0600] "GET /upload.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:30 +0600] "GET /tunnel.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 212.102.49.78 - - [25/Dec/2025:04:36:50 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 88.217.180.92 - - [25/Dec/2025:04:42:41 +0600] "GET /shsspnwyl HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:42 +0600] "GET /IESpFsVyahfqF146uD.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:44 +0600] "GET /p5aneVvVkJibzKYNXE2.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:47 +0600] "GET /alfa-rex.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:50 +0600] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:58 +0600] "GET /msok.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:00 +0600] "GET /news_parser.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:02 +0600] "GET /mE1prZFzoRgdsjQ6K4l.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:04 +0600] "GET /RPxZTVK_VEPUERtMK64.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:13 +0600] "GET /tw83qOkkbySXMWHYb.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:14 +0600] "GET /vSsIFXDZQAtLCzFJDoP.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:22 +0600] "GET /dn.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:34 +0600] "GET /Wtl7aD_NEWvniuboPFz.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:44 +0600] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:44 +0600] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:47 +0600] "GET /webstands.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:55 +0600] "GET /accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:56 +0600] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:44 +0600] "GET /9iIUixXJ2XcRpqUE4M.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:45 +0600] "GET /_DecHrFQDMAWdhSvR.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:52 +0600] "GET /wp-mail.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:54 +0600] "GET /tunnel.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:55 +0600] "GET /_LmLFLIcSEaM0wri2.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:57 +0600] "GET /iisstart.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:01 +0600] "GET /n11PzAZMFaDkWjSLb.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:01 +0600] "GET /Vogbfe0lHMx2_h9K3i.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:07 +0600] "GET /page-login.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:08 +0600] "GET /mjgP0xclQTo1dwJRuG5.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:12 +0600] "GET /1oWXt_IYveuO_D0BES.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:20 +0600] "GET /_example.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:22 +0600] "GET /shell.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:23 +0600] "GET /id.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:28 +0600] "GET /sql.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:32 +0600] "GET /pPwvzJ7QOCJaGO4XHhm.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:36 +0600] "GET /font-awesome.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:39 +0600] "GET /iAT1AMM2BTJXeJQSV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:55 +0600] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:25 +0600] "GET /proxy-jsp.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:28 +0600] "GET /welcome.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:31 +0600] "GET /e9aG2KdNKIo9FKTfUU.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:32 +0600] "GET /.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:33 +0600] "GET /V0bJFkwwVTCdedNPv.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:34 +0600] "GET /.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:35 +0600] "GET /pkPOPysas35s2P5wR.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:35 +0600] "GET /1_a6ZcFxuEGuOWuhz8.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:38 +0600] "GET /QoRNjCeDm8Th7a2L7r7.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:40 +0600] "GET /wpterm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:41 +0600] "GET /Wp-demand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:41 +0600] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:46 +0600] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:49 +0600] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:49 +0600] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:54 +0600] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:00 +0600] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:01 +0600] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:01 +0600] "GET /send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:39 +0600] "GET /4ED6U6EwLwCeRCv3Ro HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:40 +0600] "GET /home HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:43 +0600] "GET /alexusMailer_v2.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:49 +0600] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:54 +0600] "GET /jSmTg_vkZxzFJDHe27c.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:57 +0600] "GET /tunnel.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:06 +0600] "GET /home.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:09 +0600] "GET /view.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:17 +0600] "GET /manager10.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:21 +0600] "GET /xbin10x.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:25 +0600] "GET /HelloHTML.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:27 +0600] "GET /preaproveWelcome.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:30 +0600] "GET /favic0n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:37 +0600] "GET /6ASKupKLweH3fOewt.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:38 +0600] "GET /tunnel.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:40 +0600] "GET /SiuvAxk5S3_gwOxFScY.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:42 +0600] "GET /zestartnet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:43 +0600] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:45 +0600] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:47 +0600] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:38 +0600] "GET /OYDOqpSRfStbeI8VD HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:42 +0600] "GET /KYW0yQRyvX0Ws_vIO5E.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:45 +0600] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:50 +0600] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:51 +0600] "GET /qfeR90MnZUfC6rHIP.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:06 +0600] "GET /footer.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:11 +0600] "GET /user.ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:14 +0600] "GET /8Jai3VE9lonxjk2WdI.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:15 +0600] "GET /spacer.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:16 +0600] "GET /Heed.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:26 +0600] "GET /style.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:39 +0600] "GET /nNn51RwedScSiHs5Ut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:42 +0600] "GET /onetime.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:46 +0600] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:52 +0600] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:53 +0600] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:04 +0600] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:05 +0600] "GET /logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:14 +0600] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:18 +0600] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:16 +0600] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:40 +0600] "GET /error_log HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:43 +0600] "GET /ceCQnbR7QOnSxA322.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:56 +0600] "GET /spinstall0.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:59 +0600] "GET /xVK350QlRukSJ2Sftw.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:08 +0600] "GET /XS9FKxfWTSQZJoxFgQ.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:11 +0600] "GET /hvFUJg3LsPe1nr4rS.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:15 +0600] "GET /id_win.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:16 +0600] "GET /l0g.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:19 +0600] "GET /cmd-pro.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:24 +0600] "GET /sw3.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:33 +0600] "GET /6xZukR2A5DyQYr6Mnr.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:43 +0600] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:48 +0600] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:57 +0600] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:58 +0600] "GET /zestarts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:05 +0600] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:08 +0600] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:23 +0600] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:26 +0600] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 86.16.74.122 - - [25/Dec/2025:04:40:00 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:42:58 +0600] "GET /Caterpillar.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:03 +0600] "GET /wxAFP15HHxW1lPP4d.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:09 +0600] "GET /ZBe7MXvabxHtWpOCS.ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:10 +0600] "GET /SMyJ7rtNAuI37mZiOgj.ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:18 +0600] "GET /logos.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:18 +0600] "GET /one-lin.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:29 +0600] "GET /favicon.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:31 +0600] "GET /U1HA7q8UbE_mStRPg.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:37 +0600] "GET /KS9CHP5BBdrFV4Q5Iw.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:48 +0600] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:54 +0600] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:56 +0600] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:00 +0600] "GET /ws31.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:07 +0600] "GET /pwhb0t2cy9txbiga4ckhfrdsCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:09 +0600] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:13 +0600] "GET /blackrock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:21 +0600] "GET /doiconvs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:27 +0600] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:59 +0600] "GET /php8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:02 +0600] "GET /app1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:08 +0600] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:09 +0600] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:10 +0600] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:15 +0600] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:17 +0600] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:20 +0600] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:24 +0600] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:29 +0600] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:31 +0600] "GET /nop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:38 +0600] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:40 +0600] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:43 +0600] "GET /v2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:44 +0600] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:45 +0600] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:45 +0600] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:46 +0600] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:48 +0600] "GET /style-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:50 +0600] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:57 +0600] "GET /sfina.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:58 +0600] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:11 +0600] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:12 +0600] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:13 +0600] "GET /gdftps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:16 +0600] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:16 +0600] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:17 +0600] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:19 +0600] "GET /userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:25 +0600] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:28 +0600] "GET /plugin-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:30 +0600] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:32 +0600] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:33 +0600] "GET /caminho-ranger-32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:36 +0600] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:37 +0600] "GET /header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:43 +0600] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:47 +0600] "GET /library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:47 +0600] "GET /security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:49 +0600] "GET /wp-register.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:36 +0600] "GET /qiqCYGTw_NCqT0R4heK.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:45 +0600] "GET /mc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:50 +0600] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:53 +0600] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:43:59 +0600] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:02 +0600] "GET /orvxmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:03 +0600] "GET /unzip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:10 +0600] "GET /dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:12 +0600] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:20 +0600] "GET /ml3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:31 +0600] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:33 +0600] "GET /db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:35 +0600] "GET /wp-app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:38 +0600] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:41 +0600] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:44 +0600] "GET /auth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:57 +0600] "GET /M3tri-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:04 +0600] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:05 +0600] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:06 +0600] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:03 +0600] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:04 +0600] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:11 +0600] "GET /admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:14 +0600] "GET /222.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:21 +0600] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:22 +0600] "GET /ws27.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:23 +0600] "GET /o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:25 +0600] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:28 +0600] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:37 +0600] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:39 +0600] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:41 +0600] "GET /Unzip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:42 +0600] "GET /options-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:51 +0600] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:58 +0600] "GET /q1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:03 +0600] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:04 +0600] "GET /r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:06 +0600] "GET /sell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:07 +0600] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:12 +0600] "GET /wsoditz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:06 +0600] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:06 +0600] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:07 +0600] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:15 +0600] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:18 +0600] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:19 +0600] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:26 +0600] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:27 +0600] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:54 +0600] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:57 +0600] "GET /webstand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:00 +0600] "GET /fdt9os7atkcr1xojsuqaebujCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:05 +0600] "GET /wp-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:08 +0600] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:10 +0600] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:17 +0600] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:36 +0600] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:38 +0600] "GET /.wp/ndeDiPjr9BMdP3csN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:41 +0600] "GET /.wp/alfditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:42 +0600] "GET /.wp/alfanewditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:43 +0600] "GET /.wp/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:52 +0600] "GET /wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:53 +0600] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:56 +0600] "GET /logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:59 +0600] "GET /settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:01 +0600] "GET /sql.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:11 +0600] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:12 +0600] "GET /wsoditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:14 +0600] "GET /alfanewditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:22 +0600] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:23 +0600] "GET /e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:29 +0600] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:30 +0600] "GET /adm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:32 +0600] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:34 +0600] "GET /smtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:34 +0600] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:41 +0600] "GET /.wp/wsoditz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:44 +0600] "GET /.wp/wsoditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:45 +0600] "GET /uadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:49 +0600] "GET /wp-content/gi0w3vM50FGwkjiYYYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:53 +0600] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:32 +0600] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:34 +0600] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:35 +0600] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:36 +0600] "GET /Jennie007Greene.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:39 +0600] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:52 +0600] "GET /MHaila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:53 +0600] "GET /db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:54 +0600] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:56 +0600] "GET /urun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:00 +0600] "GET /owaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:11 +0600] "GET /test2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:14 +0600] "GET /alfditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:15 +0600] "GET /wpautoedit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:20 +0600] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:22 +0600] "GET /10.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:28 +0600] "GET /test1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:43 +0600] "GET /.wp/wpautoedit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:46 +0600] "GET /uadmin/USzssr3BUJAzpMz0RU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:47 +0600] "GET /uadmin/adm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:48 +0600] "GET /wp-content/RcqXcGN1g6faRXm5GI.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:30 +0600] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:48 +0600] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:49 +0600] "GET /helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:50 +0600] "GET /clear.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:55 +0600] "GET /class-IXR-base64.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:10 +0600] "GET /source.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:13 +0600] "GET /sym403bp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:15 +0600] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:16 +0600] "GET /classfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:19 +0600] "GET /4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:21 +0600] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:21 +0600] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:24 +0600] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:25 +0600] "GET /lux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:32 +0600] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:35 +0600] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:37 +0600] "GET /007spy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:37 +0600] "GET /ssss1x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:40 +0600] "GET /.wp/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:51 +0600] "GET /wp-content/options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:51 +0600] "GET /src.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:59 +0600] "GET /shlo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:02 +0600] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:09 +0600] "GET /reset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:16 +0600] "GET /tempfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:20 +0600] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:26 +0600] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:27 +0600] "GET /xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:31 +0600] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:36 +0600] "GET /ff12ffx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:38 +0600] "GET /.wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:40 +0600] "GET /.wp/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:44 +0600] "GET /.wp/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:50 +0600] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:52 +0600] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:05 +0600] "GET /admin/logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:08 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:09 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/86fcrf_Vufz0bNWgO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:11 +0600] "GET /bfcfe3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:22 +0600] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:24 +0600] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:29 +0600] "GET /pro.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:34 +0600] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:40 +0600] "GET /image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:46 +0600] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:55 +0600] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:44:58 +0600] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:01 +0600] "GET /y2thzlwwonmnfvazoklaeCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:02 +0600] "GET /system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:03 +0600] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:09 +0600] "GET /testc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:13 +0600] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:17 +0600] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:23 +0600] "GET /h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:39 +0600] "GET /.wp/P17d2m9rOKRaGt3_07.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:39 +0600] "GET /.wp/NPE0byTO_oZYPK249KP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:52 +0600] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:55 +0600] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:00 +0600] "GET /admin/PnhMmwQM7xO3F8WOaF.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:18 +0600] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:19 +0600] "GET /5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:24 +0600] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:25 +0600] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:26 +0600] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:27 +0600] "GET /pr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:28 +0600] "GET /js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:29 +0600] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:33 +0600] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:35 +0600] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:47 +0600] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:55 +0600] "GET /wp-content/t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:57 +0600] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:01 +0600] "GET /admin/zEdHs5zZZECKsSsIFnC.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:03 +0600] "GET /admin/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:13 +0600] "GET /bfcfe3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:17 +0600] "GET /assets/images/zzn2ieL38Q3C5OptHKX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:18 +0600] "GET /assets/images/php8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:21 +0600] "GET /wp-admin/php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:23 +0600] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:07 +0600] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:08 +0600] "GET /lyak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:18 +0600] "GET /3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:30 +0600] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:31 +0600] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:33 +0600] "GET /402.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:42 +0600] "GET /.wp/sym403bp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:45 +0600] "GET /uadmin/tANLH9eyHJjdQSfH5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:48 +0600] "GET /wp-content/54Jr4a2NaCFHbkCWE.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:50 +0600] "GET /wp-content/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:53 +0600] "GET /wp-content/networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:02 +0600] "GET /admin/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:04 +0600] "GET /admin/clear.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:07 +0600] "GET /wp-content/plugins/fix/IejclO81GkHf8SSTtO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:10 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:12 +0600] "GET /bfcfe3/Oa4KvjQpObFzIrzLOP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:12 +0600] "GET /bfcfe3/tfNVZBlSyNe0BV2i2dj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:19 +0600] "GET /wp-admin/q4wAdVRm2luaAHg0S.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:27 +0600] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:46 +0600] "GET /uadmin/U6ApWlOLV3yAIHzQFml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:49 +0600] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:51 +0600] "GET /wp-content/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:56 +0600] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:56 +0600] "GET /wp-content/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:58 +0600] "GET /wp-content/userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:58 +0600] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:07 +0600] "GET /wp-content/plugins/fix/UNiW1rnLBXoSa1yrqj7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:09 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/FPHbHkU0slcD9aNxUZ.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:14 +0600] "GET /.lu/bce1SsEgvKt3ukbLxs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:25 +0600] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:29 +0600] "GET /_layouts/16/uFUQMj_bhDLC7RUrAY.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:33 +0600] "GET /images/images/images/XUGCEnLSCW8z8JJZf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:34 +0600] "GET /images/images/images/JSX_wX8oA16lNIk8o1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:34 +0600] "GET /images/images/images/ve55exCIQayzNtBPnaR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:37 +0600] "GET /images/images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:41 +0600] "GET /backup/7EDPDgavJbn_PwJLE.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:44 +0600] "GET /wp-includes/widgets/Yl5Di02CixElLAEFsw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:13 +0600] "GET /.lu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:14 +0600] "GET /.lu/tcINIknJftBbcCyxY.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:15 +0600] "GET /.lu/jltBlHHonrPXL_RiXAl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:17 +0600] "GET /assets/images/9Y44OKdFq9ESe2_cNV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:19 +0600] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:20 +0600] "GET /wp-admin/0bkwArWZjDforx6Awv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:20 +0600] "GET /wp-admin/orgErEkE5AKldV27u0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:24 +0600] "GET /wp-admin/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:27 +0600] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:31 +0600] "GET /admin/ckeditor/WV3IbF8NqyPnfb35h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:37 +0600] "GET /images/images/images/images/images/images/images/0FZ9hf9fvKM4Vg2ZN7h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:41 +0600] "GET /backup/DsmwbhXlm9wlUaVZ9V.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:42 +0600] "GET /backup/Jennie007Greene.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:43 +0600] "GET /wp-includes/widgets/0E5Lh90MXn5FUQlbj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:53 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:56 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/images/XRvv2zH7zsbaWHR6y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:57 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/images/ejdKg_lFuth1sOVCXPZ.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:24 +0600] "GET /wp-admin/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:28 +0600] "GET /_layouts/16/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:28 +0600] "GET /_layouts/16/5yJ8bhrkMiORP4U00.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:31 +0600] "GET /admin/ckeditor/BwEcAacYgHkAwnS33S.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:36 +0600] "GET /images/images/images/images/images/images/images/gZryn6EDmFGOEPG4tG.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:39 +0600] "GET /wp-content/plugins/css-ready-classes-gravity-forms/7LkBDft1aDjI7BFa9l9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:43 +0600] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:49 +0600] "GET /images/images/images/images/images/FquXpS6GB0G81PFWvZ.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:50 +0600] "GET /images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:51 +0600] "GET /images/images/images/images/images/images/images/images/1TQovgLJoKQzSHEQm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:52 +0600] "GET /images/images/images/images/images/images/images/images/XqQ570AjuF3gV0l8aNm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:54 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/P1dMdl3x12GtMc9loq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:54 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/MbQu7Dbf2G9kwIhVMoQ.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:59 +0600] "GET /_layouts/15/srt0S4TvGa4lxj40V.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:00 +0600] "GET /_layouts/15/z1ReOT_vvF0clKUnhgJ.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:06 +0600] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:08 +0600] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:54 +0600] "GET /wp-content/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:02 +0600] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:04 +0600] "GET /admin/urun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:06 +0600] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:10 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/SURR7bPBHTlhI35dIIi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:16 +0600] "GET /assets/images/VQGVHdzivaWjHkJqf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:22 +0600] "GET /wp-admin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:25 +0600] "GET /wp-admin/userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:32 +0600] "GET /admin/ckeditor/103.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:33 +0600] "GET /images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:38 +0600] "GET /wp-content/plugins/css-ready-classes-gravity-forms/Esg8hv_hs1AzZNfOa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:40 +0600] "GET /wp-content/plugins/css-ready-classes-gravity-forms/mmm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:48 +0600] "GET /images/images/images/images/images/8YBICIUJ0F2A5oeh6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:55 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:59 +0600] "GET /_layouts/15/JWN5FRg7bonWa19s9S.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:13 +0600] "GET /wp-includes/networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:17 +0600] "GET /wp-includes/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:44 +0600] "GET /wp-includes/widgets/zTMQP5q9GZT370l2AX8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:47 +0600] "GET /mailerr/EDaLk6FVaIqIuYbDXjN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:50 +0600] "GET /images/images/images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:51 +0600] "GET /images/images/images/images/images/images/images/images/qXbSKxAAoqUL88p9Zy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:55 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:58 +0600] "GET /_layouts/15/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:00 +0600] "GET /_layouts/15/spinstall0.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:02 +0600] "GET /images/images/images/images/images/images/images/images/images/mEGdeMAZydfUBz5bOX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:04 +0600] "GET /images/images/images/images/images/images/images/images/images/images/VTOUPLMKfpelYNQSd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:06 +0600] "GET /wp-admin/css/xWHxgxTnUpbunqnCi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:09 +0600] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:16 +0600] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:18 +0600] "GET /wp-includes/orvxmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:19 +0600] "GET /images/images/images/images/nwII8P97DohFy7L8nD.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:26 +0600] "GET /670302/memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:26 +0600] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:30 +0600] "GET /wp-includes/Text/RmTfgEFiEHt4QvOGapP.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:29 +0600] "GET /_layouts/16/bWA6bOoO6Zso23Wlni6.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:30 +0600] "GET /_layouts/16/spinstall0.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:30 +0600] "GET /admin/ckeditor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:35 +0600] "GET /images/images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:39 +0600] "GET /wp-content/plugins/css-ready-classes-gravity-forms/W6tjZcqdjskRS2Vnbk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:45 +0600] "GET /wp-includes/widgets/ini_db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:49 +0600] "GET /images/images/images/images/images/hG1tBYCssYUbaYGeNBy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:01 +0600] "GET /images/images/images/images/images/images/images/images/images/_cI0058ron3uuIFRn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:05 +0600] "GET /images/images/images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:07 +0600] "GET /wp-admin/css/kOo9VHmlzexMDzegXe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:10 +0600] "GET /wp-includes/32sfFoAxkSg05E7b1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:11 +0600] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:12 +0600] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:14 +0600] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:27 +0600] "GET /wp-includes/js/loYePsJXiopie3oO4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:28 +0600] "GET /wp-includes/js/db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:29 +0600] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:58 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:02 +0600] "GET /images/images/images/images/images/images/images/images/images/KMUrhJyy7wl_joNEWCf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:03 +0600] "GET /images/images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:03 +0600] "GET /images/images/images/images/images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:07 +0600] "GET /wp-admin/css/Hv8UBR2z84fbuFDbvHv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:08 +0600] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:09 +0600] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:10 +0600] "GET /wp-includes/DsMLWG79NtPj3q9Bdn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:11 +0600] "GET /wp-includes/IZP5ampkNnmKDgq9USp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:15 +0600] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:21 +0600] "GET /images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:22 +0600] "GET /images/images/images/images/images/images/UtIPB5dfBuCZqxYSWq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:22 +0600] "GET /images/images/images/images/images/images/KzXfpkcYTk3X056TBhL.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:24 +0600] "GET /670302/sehsUB__UjpU7xAHyT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:25 +0600] "GET /670302/zM0vsfVZqI75xteyNUD.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:25 +0600] "GET /670302/gdftps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:30 +0600] "GET /wp-includes/Text/CxvI0CVAJZkEYb3Czf.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:05 +0600] "GET /admin/yeniurun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:08 +0600] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:15 +0600] "GET /.lu/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:21 +0600] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:32 +0600] "GET /admin/ckeditor/Yw2zlMFNCJ8YlUm5EOg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:35 +0600] "GET /images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:47 +0600] "GET /mailerr/mai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:48 +0600] "GET /images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:53 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/Gt0opByz3dwX8Rhty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:56 +0600] "GET /images/images/images/images/images/images/images/images/images/images/images/images/images/uzwMmVy2Up7V9WYkSY.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:00 +0600] "GET /images/images/images/images/images/images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:12 +0600] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:14 +0600] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:15 +0600] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:27 +0600] "GET /wp-includes/js/IbPL0KnN6PD_YueZ4J.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:28 +0600] "GET /wp-includes/js/d4GdjI2Yrz68jJJi8NT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:31 +0600] "GET /wp-includes/Text/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:31 +0600] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:54 +0600] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:57 +0600] "GET /wp-content/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:45:59 +0600] "GET /admin/ztcHqcn4I1Ex2i1Us.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:03 +0600] "GET /admin/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:06 +0600] "GET /wp-content/plugins/fix/Mx9xbJ_5P4EOzCpTa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:11 +0600] "GET /bfcfe3/rDDf7UCIY7IqTzm1I.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:26 +0600] "GET /wp-admin/networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:26 +0600] "GET /wp-admin/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:36 +0600] "GET /images/images/images/images/images/images/images/3ETkAYlyoUzF7RkiG.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:38 +0600] "GET /wp-content/plugins/css-ready-classes-gravity-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:40 +0600] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:42 +0600] "GET /backup/xG8ZB2qXD074UbnszqT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:45 +0600] "GET /mailerr/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:52 +0600] "GET /images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:05 +0600] "GET /images/images/images/images/images/images/images/images/images/images/rIXml3kber1fBCJ5HKc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:18 +0600] "GET /images/images/images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:20 +0600] "GET /images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:33 +0600] "GET /wp-includes/pomo/db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:32 +0600] "GET /wp-includes/pomo/8jn6lkp4gsKjXWK0OF.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:35 +0600] "GET /wp-includes/pomo/user-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:38 +0600] "GET /wc/ark/8vFpExhVWX6S46buj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:42 +0600] "GET /wp-admin/.wp-languages/mLEqjgxeIHFsfdxEFP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:43 +0600] "GET /wp-admin/.wp-languages/orvxmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:16 +0600] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:18 +0600] "GET /assets/images/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:23 +0600] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:46 +0600] "GET /mailerr/lE_MVnnSErHXkEkz4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:46:46 +0600] "GET /mailerr/ObffKDd_q4FqYhTpnA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:04 +0600] "GET /images/images/images/images/images/images/images/images/images/images/WQ0jLutf8eh2b7OoUX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:20 +0600] "GET /images/images/images/images/c2ZPtjzJDXpCT03Ofdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:24 +0600] "GET /670302/LUuSqsY4mQ8Ou2iFv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:36 +0600] "GET /RBFCU/scms/SHELL/D0zQ1TOOeoluldDMQ.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:40 +0600] "GET /wc/ark/logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:13 +0600] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:16 +0600] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:17 +0600] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:19 +0600] "GET /images/images/images/images/th60Ecl7gamhb8kno.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:23 +0600] "GET /images/images/images/images/images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:29 +0600] "GET /wp-includes/Text/6dBQG2TnGj9kig4NO.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:35 +0600] "GET /RBFCU/scms/SHELL/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:41 +0600] "GET /wp-admin/.wp-languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:21 +0600] "GET /images/images/images/images/images/images/Xfnf_mDuyxw_dzI6h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:23 +0600] "GET /670302/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:36 +0600] "GET /RBFCU/scms/SHELL/ckJbZCE0P7XuP5mdie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:34 +0600] "GET /wp-includes/pomo/db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:39 +0600] "GET /wc/ark/4Q_eF6A3MgRmrIMVfA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:39 +0600] "GET /wc/ark/QS_eyDvIx6VxDHiJVEo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:40 +0600] "GET /wc/ark/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:42 +0600] "GET /wp-admin/.wp-languages/cFdZIL8v_vm6ejCeHwy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:38 +0600] "GET /wc/ark/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:32 +0600] "GET /wp-includes/pomo/JNzQ1Gbhzxla2RY_S.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:33 +0600] "GET /wp-includes/pomo/DacrdHxb1S8IVNRsBUH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:34 +0600] "GET /wp-includes/pomo/ini_db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:37 +0600] "GET /RBFCU/scms/SHELL/2pHUIdVFIyNb9YV7n9d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:37 +0600] "GET /RBFCU/scms/SHELL/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 88.217.180.92 - - [25/Dec/2025:04:47:41 +0600] "GET /wp-admin/.wp-languages/fJVOwA4k1buPiGYYL.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux, Android 10, K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Mobile Safari/537.36" 176.100.243.133 - - [25/Dec/2025:04:58:26 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 174.138.61.184 - - [25/Dec/2025:05:05:50 +0600] "POST /wp-admin/css/colors/register3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 129.150.39.251 - - [25/Dec/2025:05:08:13 +0600] "POST /wp-admin/includes/blockt/certificates/css/includes/ccnewsletter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.20.83.78 - - [25/Dec/2025:05:08:21 +0600] "POST /wp-admin/includes/blockt/certificates/css/includes/ccnewsletter.php HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 47.251.57.165 - - [25/Dec/2025:05:08:22 +0600] "POST /wp-admin/includes/blockt/certificates/css/includes/ccnewsletter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 202.83.30.96 - - [25/Dec/2025:05:04:43 +0600] "GET http://tssms.tsgbd.com/wp-content/themes/mod_icetabs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 156.38.112.11 - - [25/Dec/2025:05:06:52 +0600] "POST /wp-admin/includes/Reposter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.111.166.178 - - [25/Dec/2025:05:05:15 +0600] "POST /wp-includes/ID3/js/vert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 82.115.60.66 - - [25/Dec/2025:05:05:17 +0600] "POST /wp-includes/ID3/js/vert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 95.135.154.46 - - [25/Dec/2025:05:06:56 +0600] "POST http://tssms.tsgbd.com/wp-admin/includes/Reposter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 194.187.251.11 - - [25/Dec/2025:05:04:54 +0600] "GET /wp-content/themes/mod_icetabs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 165.227.118.27 - - [25/Dec/2025:05:08:50 +0600] "POST /wp-admin/auction.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.236.88.82 - - [25/Dec/2025:05:12:25 +0600] "POST http://tssms.tsgbd.com/wp-content/themes/twentytwenty/inc/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 41.220.17.62 - - [25/Dec/2025:05:11:34 +0600] "GET /wp-content/widgets/languages/A.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 154.17.224.118 - - [25/Dec/2025:05:14:26 +0600] "POST http://tssms.tsgbd.com/wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18.218.187.141 - - [25/Dec/2025:05:16:27 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 178.212.144.7 - - [25/Dec/2025:05:09:02 +0600] "POST /wp-admin/auction.php HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.254.99.208 - - [25/Dec/2025:05:09:55 +0600] "GET http://tssms.tsgbd.com/wp-includes/images/smilies/user_details.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.81.205.173 - - [25/Dec/2025:05:10:29 +0600] "POST /wp-includes/themes/style-engine/css/ThumbBase.inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 85.220.141.221 - - [25/Dec/2025:05:12:24 +0600] "POST /wp-content/themes/twentytwenty/inc/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 114.115.190.21 - - [25/Dec/2025:05:21:44 +0600] "GET / HTTP/1.1" 301 795 "-" "Python/3.6 aiohttp/3.7.4.post0" 145.239.254.55 - - [25/Dec/2025:05:09:44 +0600] "GET /wp-includes/images/smilies/user_details.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.34.233.145 - - [25/Dec/2025:05:16:25 +0600] "GET /favicon.ico HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 35.187.132.106 - - [25/Dec/2025:05:16:35 +0600] "HEAD / HTTP/1.1" 301 0 "http://tssms.tsgbd.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 205.169.39.2 - - [25/Dec/2025:05:09:26 +0600] "GET /wp-includes/id3/js/vert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 45.59.186.60 - - [25/Dec/2025:05:13:50 +0600] "GET http://tssms.tsgbd.com/wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.187.132.108 - - [25/Dec/2025:05:16:25 +0600] "HEAD / HTTP/1.1" 301 0 "http://tssms.tsgbd.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 176.100.243.133 - - [25/Dec/2025:06:10:50 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 34.72.176.129 - - [25/Dec/2025:06:21:25 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 104.197.69.115 - - [25/Dec/2025:06:22:13 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 173.244.56.136 - - [25/Dec/2025:06:22:09 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" 58.251.94.154 - - [25/Dec/2025:06:36:20 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/68.0.3440.106 Chrome/68.0.3440.106 Safari/537.36" 106.205.182.211 - - [25/Dec/2025:06:51:02 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 35.91.115.94 - - [25/Dec/2025:06:50:59 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 54.184.187.252 - - [25/Dec/2025:06:51:06 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 43.225.142.236 - - [25/Dec/2025:07:16:23 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Windows x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Functionize" 43.225.142.236 - - [25/Dec/2025:07:16:24 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Windows x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Functionize" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 43.225.142.236 - - [25/Dec/2025:07:16:26 +0600] "GET / HTTP/1.1" 301 795 "-" "-" 58.251.94.154 - - [25/Dec/2025:07:36:33 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36" 34.140.43.187 - - [25/Dec/2025:08:36:26 +0600] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 58.251.94.154 - - [25/Dec/2025:09:38:09 +0600] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36"