Submit
Path:
~
/
home
/
ampckwxt
/
access-logs
/
File Content:
super7script.xyz.ampcuan123.lol
43.157.53.115 - - [13/Feb/2026:12:26:28 +0000] "GET / HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.61.41.44 - - [13/Feb/2026:13:28:44 +0000] "GET /simple.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:44 +0000] "GET /wp-admin/network/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:45 +0000] "GET /inputs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:45 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:45 +0000] "GET /autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:45 +0000] "GET /wp-includes/bk/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:46 +0000] "GET /file2.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:28:46 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:46 +0000] "GET /file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:46 +0000] "GET /chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:46 +0000] "GET /item.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:47 +0000] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:47 +0000] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:28:47 +0000] "GET /zwso.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:47 +0000] "GET /wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.44 - - [13/Feb/2026:13:28:47 +0000] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:28:48 +0000] "GET /wp-includes/js/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:28:48 +0000] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:28:48 +0000] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:28:49 +0000] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:49 +0000] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:28:49 +0000] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:28:49 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:49 +0000] "GET /templates/natural.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:50 +0000] "GET /cong.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:28:50 +0000] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:28:50 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:28:50 +0000] "GET /dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:51 +0000] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:28:51 +0000] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:28:51 +0000] "GET /wp-content/plugins/up/main.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.44 - - [13/Feb/2026:13:28:51 +0000] "GET /repeater.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:28:51 +0000] "GET /wp-2019.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.44 - - [13/Feb/2026:13:28:52 +0000] "GET /atomlib.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:52 +0000] "GET /css.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:28:52 +0000] "GET /log.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:52 +0000] "GET /mail.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:53 +0000] "GET /lufix.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.44 - - [13/Feb/2026:13:28:53 +0000] "GET /doc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:53 +0000] "GET /bak.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:28:53 +0000] "GET /content.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:28:53 +0000] "GET /upfile.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:28:54 +0000] "GET /wp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:54 +0000] "GET /bypass.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.44 - - [13/Feb/2026:13:28:54 +0000] "GET /wp-activate.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.44 - - [13/Feb/2026:13:28:54 +0000] "GET /updates.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.44 - - [13/Feb/2026:13:28:55 +0000] "GET /radio.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:28:55 +0000] "GET /plugins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:28:55 +0000] "GET /xmrlpc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:55 +0000] "GET /ae.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:55 +0000] "GET /moon.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:56 +0000] "GET /blog.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:56 +0000] "GET /themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:56 +0000] "GET /ini.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:28:56 +0000] "GET /as.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:28:57 +0000] "GET /shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:57 +0000] "GET /ws.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:57 +0000] "GET /makeasmtp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.44 - - [13/Feb/2026:13:28:57 +0000] "GET /wp-sigunq.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:28:57 +0000] "GET /wso112233.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:58 +0000] "GET /wp-atom.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:28:58 +0000] "GET /alfanew.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:28:58 +0000] "GET /fw.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:58 +0000] "GET /install.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.44 - - [13/Feb/2026:13:28:59 +0000] "GET /wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:59 +0000] "GET /wp-admin/shapes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:28:59 +0000] "GET /XxX.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:28:59 +0000] "GET /Marvins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:28:59 +0000] "GET /wp-includes/css/modules.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:00 +0000] "GET /olux.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:29:00 +0000] "GET /wso.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:00 +0000] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:00 +0000] "GET /uploader.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.44 - - [13/Feb/2026:13:29:00 +0000] "GET /1337.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:01 +0000] "GET /user.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:01 +0000] "GET /wp-info.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.44 - - [13/Feb/2026:13:29:01 +0000] "GET /wxo.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:29:01 +0000] "GET /amigo.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:29:02 +0000] "GET /yoi.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:02 +0000] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:02 +0000] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:02 +0000] "GET /wp-contentt.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:02 +0000] "GET /we1y8.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:03 +0000] "GET /wp-content/iu.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:29:03 +0000] "GET /ccx/th3_err0r.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:29:03 +0000] "GET /ccx/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.44 - - [13/Feb/2026:13:29:03 +0000] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:04 +0000] "GET /hehe.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:04 +0000] "GET /post-data.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:29:04 +0000] "GET /w0.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:29:04 +0000] "GET /old-index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:04 +0000] "GET /wsanon.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:29:05 +0000] "GET /wp-content/small.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:05 +0000] "GET /wp-content/mode.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.44 - - [13/Feb/2026:13:29:05 +0000] "GET /indo.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.44 - - [13/Feb/2026:13:29:05 +0000] "GET /beence.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:06 +0000] "GET /indosec.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.44 - - [13/Feb/2026:13:29:06 +0000] "GET /archives.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:06 +0000] "GET /po8sa.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:06 +0000] "GET /thesmartestx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:29:06 +0000] "GET /zcanp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:07 +0000] "GET /burjuva.aspx HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.14 - - [13/Feb/2026:13:29:07 +0000] "GET /pvt.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:07 +0000] "GET /shell20211028.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:07 +0000] "GET /cgi-bin/wp-2019.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:08 +0000] "GET /crypted.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.14 - - [13/Feb/2026:13:29:08 +0000] "GET /h0110w4y.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:08 +0000] "GET /vesiw.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:08 +0000] "GET /w.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:09 +0000] "GET /wp-db.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:09 +0000] "GET /wp-includes/lx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:09 +0000] "GET /wp-content/ice.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.14 - - [13/Feb/2026:13:29:09 +0000] "GET /wp-content/lx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:09 +0000] "GET /lx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:10 +0000] "GET /tonant.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:10 +0000] "GET /f0x.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:10 +0000] "GET /config.bak.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:10 +0000] "GET /bypass403.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.14 - - [13/Feb/2026:13:29:10 +0000] "GET /adminer.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:11 +0000] "GET /allahnaber.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:11 +0000] "GET /AK-74.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.14 - - [13/Feb/2026:13:29:11 +0000] "GET /alfa3.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:11 +0000] "GET /alfaindex.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.14 - - [13/Feb/2026:13:29:12 +0000] "GET /alfa.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:12 +0000] "GET /c99.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:12 +0000] "GET /cmd.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:12 +0000] "GET /cw.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:12 +0000] "GET /date.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:13 +0000] "GET /haxor.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.14 - - [13/Feb/2026:13:29:13 +0000] "GET /icomsium.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:13 +0000] "GET /ico.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:13 +0000] "GET /leaf.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:13 +0000] "GET /marijuana.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:14 +0000] "GET /mass.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.14 - - [13/Feb/2026:13:29:14 +0000] "GET /mini.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:14 +0000] "GET /priv8.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:14 +0000] "GET /pws.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:15 +0000] "GET /r57.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:15 +0000] "GET /robots.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:15 +0000] "GET /snd.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:15 +0000] "GET /wp-class.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:16 +0000] "GET /new-index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:16 +0000] "GET /wp-content/batm.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:16 +0000] "GET /wp-content/masshp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:16 +0000] "GET /wp-content/alfa.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:16 +0000] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:17 +0000] "GET /alfacgiapi/perl.alfa HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:17 +0000] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.14 - - [13/Feb/2026:13:29:17 +0000] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:17 +0000] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.14 - - [13/Feb/2026:13:29:18 +0000] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:18 +0000] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:18 +0000] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:18 +0000] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.14 - - [13/Feb/2026:13:29:19 +0000] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:19 +0000] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:19 +0000] "GET /wp-content/think.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.14 - - [13/Feb/2026:13:29:19 +0000] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:19 +0000] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:20 +0000] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:20 +0000] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:20 +0000] "GET /wp-includes/css/F0x.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:20 +0000] "GET /wp-content/uploads/F0x.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:20 +0000] "GET /class-wp-widget-archives.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:21 +0000] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:21 +0000] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:21 +0000] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:21 +0000] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:22 +0000] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:22 +0000] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.14 - - [13/Feb/2026:13:29:22 +0000] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.14 - - [13/Feb/2026:13:29:22 +0000] "GET /xt/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:23 +0000] "GET /xleet-shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:23 +0000] "GET /xleet.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:23 +0000] "GET /xleetshell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:23 +0000] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.14 - - [13/Feb/2026:13:29:23 +0000] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:24 +0000] "GET /xlt.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:24 +0000] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:24 +0000] "GET /wp-content/xleet.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:24 +0000] "GET /wp-admin/xleet-shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:24 +0000] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.14 - - [13/Feb/2026:13:29:25 +0000] "GET /wp-content/plugins/core/include.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:25 +0000] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:25 +0000] "GET /nf_tracking.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.14 - - [13/Feb/2026:13:29:25 +0000] "GET /class.api.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:25 +0000] "GET /xl2023.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:26 +0000] "GET /wp-head.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:26 +0000] "GET /wp-pano.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.14 - - [13/Feb/2026:13:29:26 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:27 +0000] "GET /wp-includes/IXR/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.14 - - [13/Feb/2026:13:29:27 +0000] "GET /xmlrpc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:27 +0000] "GET /wp-admin.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:28 +0000] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:28 +0000] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:28 +0000] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:28 +0000] "GET /WSOEnigma.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:28 +0000] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:29 +0000] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.14 - - [13/Feb/2026:13:29:29 +0000] "GET /about/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:29 +0000] "GET /index/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.14 - - [13/Feb/2026:13:29:29 +0000] "GET /mah.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:30 +0000] "GET /mah/function.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:30 +0000] "GET /test.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.22 - - [13/Feb/2026:13:29:30 +0000] "GET /wp-includes/Requests/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.22 - - [13/Feb/2026:13:29:30 +0000] "GET /gebase.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.22 - - [13/Feb/2026:13:29:31 +0000] "GET /defaults.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:31 +0000] "GET /asasx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:31 +0000] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:31 +0000] "GET /admin/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.22 - - [13/Feb/2026:13:29:32 +0000] "GET /mah/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:32 +0000] "GET /contact.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:32 +0000] "GET /classwithtostring.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:32 +0000] "GET /mah.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:32 +0000] "GET /wp-add.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:33 +0000] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:33 +0000] "GET /wp-admin/images/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.22 - - [13/Feb/2026:13:29:33 +0000] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:33 +0000] "GET /403.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:33 +0000] "GET /alfa-rex.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:34 +0000] "GET /wp-includes/css/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:34 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:34 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.22 - - [13/Feb/2026:13:29:34 +0000] "GET /wp-includes/css/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.22 - - [13/Feb/2026:13:29:35 +0000] "GET /text.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.22 - - [13/Feb/2026:13:29:35 +0000] "GET /xc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.22 - - [13/Feb/2026:13:29:35 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:35 +0000] "GET /wp-admin/images/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.22 - - [13/Feb/2026:13:29:35 +0000] "GET /wp-content/plugins/about.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:36 +0000] "GET /filemanager/dialog.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:36 +0000] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:36 +0000] "GET /bk/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:37 +0000] "GET /css/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.22 - - [13/Feb/2026:13:29:37 +0000] "GET /go.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.22 - - [13/Feb/2026:13:29:37 +0000] "GET /files/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.22 - - [13/Feb/2026:13:29:37 +0000] "GET /byp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.22 - - [13/Feb/2026:13:29:37 +0000] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:38 +0000] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:38 +0000] "GET /gawean.PhP7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.22 - - [13/Feb/2026:13:29:38 +0000] "GET /baxa1.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.22 - - [13/Feb/2026:13:29:38 +0000] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:39 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:39 +0000] "GET /click.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:39 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:39 +0000] "GET /wp-content/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:39 +0000] "GET /wp-admin/css/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:40 +0000] "GET /baxa1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.22 - - [13/Feb/2026:13:29:40 +0000] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:40 +0000] "GET /in.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:40 +0000] "GET /geju.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:41 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:41 +0000] "GET /wp-signup.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:41 +0000] "GET /elp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:41 +0000] "GET /wp-includes/makeasmtp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:41 +0000] "GET /wp-includes/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:42 +0000] "GET /chosen-667.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.22 - - [13/Feb/2026:13:29:42 +0000] "GET /network.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:42 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:42 +0000] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:42 +0000] "GET /wp-admin/x.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:43 +0000] "GET /yanz.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:43 +0000] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.22 - - [13/Feb/2026:13:29:43 +0000] "GET /wp-content/upgrade/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:43 +0000] "GET /wp-admin/maint/go.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:44 +0000] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:44 +0000] "GET /worm0.PhP7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:44 +0000] "GET /wp-content/cong.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.22 - - [13/Feb/2026:13:29:44 +0000] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:44 +0000] "GET /wp-content/languages/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:45 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:45 +0000] "GET /wp-content/upgrade/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.22 - - [13/Feb/2026:13:29:45 +0000] "GET /wp-content/plugins/seooyanz/wsoyanzv3.7.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.22 - - [13/Feb/2026:13:29:45 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:46 +0000] "GET /tiny.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:46 +0000] "GET /edit.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.22 - - [13/Feb/2026:13:29:46 +0000] "GET /first.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:46 +0000] "GET /admin/log.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:46 +0000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.22 - - [13/Feb/2026:13:29:47 +0000] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:47 +0000] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.22 - - [13/Feb/2026:13:29:47 +0000] "GET /wp-admin/includes/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:47 +0000] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:47 +0000] "GET /wp-includes/bak.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:48 +0000] "GET /bs1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:48 +0000] "GET /wp-includes/images/wp-login.php HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:48 +0000] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:48 +0000] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.22 - - [13/Feb/2026:13:29:49 +0000] "GET /cron.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:49 +0000] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.22 - - [13/Feb/2026:13:29:49 +0000] "GET /db.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:49 +0000] "GET /fm.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:49 +0000] "GET /wp-includes/customize/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:50 +0000] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:50 +0000] "GET /a.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.22 - - [13/Feb/2026:13:29:50 +0000] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:50 +0000] "GET /wp-includes/themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.22 - - [13/Feb/2026:13:29:51 +0000] "GET /chosen.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:51 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:51 +0000] "GET /back.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:51 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:51 +0000] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:52 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:52 +0000] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:52 +0000] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:52 +0000] "GET /new.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:52 +0000] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.22 - - [13/Feb/2026:13:29:53 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:53 +0000] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:53 +0000] "GET /phpfm3.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.22 - - [13/Feb/2026:13:29:53 +0000] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:54 +0000] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:54 +0000] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:54 +0000] "GET /post.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.22 - - [13/Feb/2026:13:29:54 +0000] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:55 +0000] "GET /wp-admin/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.22 - - [13/Feb/2026:13:29:55 +0000] "GET /wp-admin/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.22 - - [13/Feb/2026:13:29:55 +0000] "GET /wp-includes/block-supports/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:55 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:55 +0000] "GET /wp-admin/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:56 +0000] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.22 - - [13/Feb/2026:13:29:56 +0000] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.22 - - [13/Feb/2026:13:29:56 +0000] "GET /randkeyword.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:56 +0000] "GET /wp-content/plugins/awesome-coming-soon/flower.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:57 +0000] "GET /wp-content/1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:57 +0000] "GET /xxx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:57 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:57 +0000] "GET /lv.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.22 - - [13/Feb/2026:13:29:57 +0000] "GET /zip.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.22 - - [13/Feb/2026:13:29:58 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.22 - - [13/Feb/2026:13:29:58 +0000] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:29:58 +0000] "GET /wp-content/plugins/wpcall-button/dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:29:58 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:29:59 +0000] "GET /wp-includes/assets/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:29:59 +0000] "GET /wp-includes/widgets/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:29:59 +0000] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:29:59 +0000] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:29:59 +0000] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.10 - - [13/Feb/2026:13:30:00 +0000] "GET /.well-known/pki-validation/ HTTP/1.1" 200 896 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.10 - - [13/Feb/2026:13:30:00 +0000] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:00 +0000] "GET /wp-content/themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.10 - - [13/Feb/2026:13:30:01 +0000] "GET /wp-cron.php HTTP/1.1" 200 503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.10 - - [13/Feb/2026:13:30:01 +0000] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:01 +0000] "GET /cgi-bin/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:02 +0000] "GET /jp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:02 +0000] "GET /rcc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.10 - - [13/Feb/2026:13:30:02 +0000] "GET /wp-includes/pomo/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:02 +0000] "GET /class.api.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:03 +0000] "GET /layout.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:03 +0000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:03 +0000] "GET /history.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:03 +0000] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:03 +0000] "GET /index/function.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:04 +0000] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:04 +0000] "GET /images/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:04 +0000] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.10 - - [13/Feb/2026:13:30:04 +0000] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:05 +0000] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:05 +0000] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:05 +0000] "GET /about.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:05 +0000] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:05 +0000] "GET /cong.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.10 - - [13/Feb/2026:13:30:06 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.10 - - [13/Feb/2026:13:30:06 +0000] "GET /wp-admin/maint/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:06 +0000] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:06 +0000] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:07 +0000] "GET /wp-links.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:07 +0000] "GET /makeasmtp.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.10 - - [13/Feb/2026:13:30:07 +0000] "GET /wp-content/classwithtostring.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:07 +0000] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:07 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:08 +0000] "GET /login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:08 +0000] "GET /wp-content/languages/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:08 +0000] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:08 +0000] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:09 +0000] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:09 +0000] "GET /wp-includes/Text/network.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:09 +0000] "GET /wp-includes/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:09 +0000] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:10 +0000] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:10 +0000] "GET /wp-admin/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:10 +0000] "GET /wander.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.10 - - [13/Feb/2026:13:30:10 +0000] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:11 +0000] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:11 +0000] "GET /wp-config-sample.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:11 +0000] "GET /admin/upload/css.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:11 +0000] "GET /wp-admin/js/about.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.10 - - [13/Feb/2026:13:30:11 +0000] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.10 - - [13/Feb/2026:13:30:12 +0000] "GET /images/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:12 +0000] "GET /manager.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:12 +0000] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:12 +0000] "GET /wp-content/plugins/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:12 +0000] "GET /users.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.10 - - [13/Feb/2026:13:30:13 +0000] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:13 +0000] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:13 +0000] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:13 +0000] "GET /about/function.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.10 - - [13/Feb/2026:13:30:14 +0000] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:14 +0000] "GET /wp-content/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:14 +0000] "GET /function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:14 +0000] "GET /wp-admin/network/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:15 +0000] "GET /wp-admin/user/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:15 +0000] "GET /wp-includes/IXR/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.10 - - [13/Feb/2026:13:30:15 +0000] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:15 +0000] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:16 +0000] "GET /wp-includes/makeasmtp.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:16 +0000] "GET /wp-includes/js/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:16 +0000] "GET /plugins/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:16 +0000] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:16 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.10 - - [13/Feb/2026:13:30:17 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.10 - - [13/Feb/2026:13:30:17 +0000] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.10 - - [13/Feb/2026:13:30:17 +0000] "GET /wp-admin/js/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.10 - - [13/Feb/2026:13:30:17 +0000] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:17 +0000] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:18 +0000] "GET /wp-mail.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:18 +0000] "GET /baxa1.phP8 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:18 +0000] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:18 +0000] "GET /.well-known/accah.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:19 +0000] "GET /admin-post.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.10 - - [13/Feb/2026:13:30:19 +0000] "GET /conf_upload.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:19 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.10 - - [13/Feb/2026:13:30:19 +0000] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:20 +0000] "GET /wp-content/plugins/hello.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.10 - - [13/Feb/2026:13:30:20 +0000] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.10 - - [13/Feb/2026:13:30:20 +0000] "GET /wp-configs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:20 +0000] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:21 +0000] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.10 - - [13/Feb/2026:13:30:21 +0000] "GET /cgi-bin/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:21 +0000] "GET /f35.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.10 - - [13/Feb/2026:13:30:21 +0000] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.10 - - [13/Feb/2026:13:30:21 +0000] "GET /wp-admin/maint/flower.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:22 +0000] "GET /edit.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.24 - - [13/Feb/2026:13:30:22 +0000] "GET /wp-admin/license.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.24 - - [13/Feb/2026:13:30:22 +0000] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:23 +0000] "GET /files.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:23 +0000] "GET /webadmin.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.24 - - [13/Feb/2026:13:30:23 +0000] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.24 - - [13/Feb/2026:13:30:23 +0000] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:23 +0000] "GET /wsa.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:24 +0000] "GET /tinyfilemanager.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.24 - - [13/Feb/2026:13:30:24 +0000] "GET /wp-content/json.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:24 +0000] "GET /wp-admin/css/colors/coffee/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:25 +0000] "GET /cgi-bin/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:25 +0000] "GET /woh.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:25 +0000] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:26 +0000] "GET /wp-includes/style-engine/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:26 +0000] "GET /bless.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:26 +0000] "GET /wp-trackback.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:26 +0000] "GET /info.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.24 - - [13/Feb/2026:13:30:26 +0000] "GET /wp-includes/html-api/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.24 - - [13/Feb/2026:13:30:27 +0000] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:27 +0000] "GET /buy.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.24 - - [13/Feb/2026:13:30:27 +0000] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:27 +0000] "GET /readme.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:28 +0000] "GET /sck.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.24 - - [13/Feb/2026:13:30:28 +0000] "GET /fm.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:28 +0000] "GET /wp-content/blue.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:28 +0000] "GET /packed.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:28 +0000] "GET /about.php?525 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.24 - - [13/Feb/2026:13:30:29 +0000] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:29 +0000] "GET /file/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:29 +0000] "GET /wp-admin/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:29 +0000] "GET /plugin.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.24 - - [13/Feb/2026:13:30:29 +0000] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.24 - - [13/Feb/2026:13:30:30 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:30 +0000] "GET /wp-content/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:30 +0000] "GET /chosen.php?upload HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.24 - - [13/Feb/2026:13:30:30 +0000] "GET /load.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.24 - - [13/Feb/2026:13:30:31 +0000] "GET /wp-includes/css/dist/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.24 - - [13/Feb/2026:13:30:31 +0000] "GET /edit-tags.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.24 - - [13/Feb/2026:13:30:31 +0000] "GET /wp-includes/rk2.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:31 +0000] "GET /saka.phP7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:32 +0000] "GET /autoload_classmap.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:32 +0000] "GET /lock.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.24 - - [13/Feb/2026:13:30:32 +0000] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:32 +0000] "GET /.well-known/wp-conflg.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:33 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.24 - - [13/Feb/2026:13:30:33 +0000] "GET /wordpress/wp-includes/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:33 +0000] "GET /templates/beez5/error.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:33 +0000] "GET /product.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:34 +0000] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:34 +0000] "GET /wp-content/item.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:34 +0000] "GET /wp-includes/plugin.php HTTP/1.1" 200 503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.24 - - [13/Feb/2026:13:30:34 +0000] "GET /base.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.24 - - [13/Feb/2026:13:30:35 +0000] "GET /wp-content/mah.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.24 - - [13/Feb/2026:13:30:35 +0000] "GET /zero.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:35 +0000] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:35 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:35 +0000] "GET /style.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.24 - - [13/Feb/2026:13:30:36 +0000] "GET /db.php?u HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.24 - - [13/Feb/2026:13:30:36 +0000] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:36 +0000] "GET /wp-admin/options.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.24 - - [13/Feb/2026:13:30:36 +0000] "GET /wp-content/plugin.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:36 +0000] "GET /wp-set.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:37 +0000] "GET /file.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:37 +0000] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.24 - - [13/Feb/2026:13:30:37 +0000] "GET /wp-includes/mah.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:37 +0000] "GET /wp-admin/css/colors/sunrise/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.24 - - [13/Feb/2026:13:30:38 +0000] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.24 - - [13/Feb/2026:13:30:38 +0000] "GET /images/images/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:38 +0000] "GET /wp-admin/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:38 +0000] "GET /assets/radio.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:38 +0000] "GET /.well-known/bak.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:39 +0000] "GET /wp-admin/cong.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:39 +0000] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:39 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:39 +0000] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:40 +0000] "GET /Files/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:40 +0000] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.24 - - [13/Feb/2026:13:30:40 +0000] "GET /moon.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:40 +0000] "GET /wp-content/uploads/aves.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:41 +0000] "GET /wp-includes/customize/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.24 - - [13/Feb/2026:13:30:41 +0000] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:41 +0000] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.24 - - [13/Feb/2026:13:30:41 +0000] "GET /.well-known/pki-validation/angu.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.24 - - [13/Feb/2026:13:30:41 +0000] "GET /wp-admin/install.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.24 - - [13/Feb/2026:13:30:42 +0000] "GET /pages.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:42 +0000] "GET /bulk.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:42 +0000] "GET /kk.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:42 +0000] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.24 - - [13/Feb/2026:13:30:43 +0000] "GET /wp-logout.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:43 +0000] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:43 +0000] "GET /img/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.24 - - [13/Feb/2026:13:30:43 +0000] "GET /wp-includes/packed.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:44 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.24 - - [13/Feb/2026:13:30:44 +0000] "GET /wp-setup.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:44 +0000] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.24 - - [13/Feb/2026:13:30:44 +0000] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:45 +0000] "GET /wp-editor.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:45 +0000] "GET /wp-simple.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.24 - - [13/Feb/2026:13:30:45 +0000] "GET /.well-known/classwithtostring.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.24 - - [13/Feb/2026:13:30:45 +0000] "GET /.well-known/radio.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:30:46 +0000] "GET /wp-includes/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.44 - - [13/Feb/2026:13:30:46 +0000] "GET /wp-admin/images/wp-post.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:46 +0000] "GET /wp-includes/css/chosen.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.44 - - [13/Feb/2026:13:30:46 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.44 - - [13/Feb/2026:13:30:47 +0000] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:47 +0000] "GET /hehehehe.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:47 +0000] "GET /wordpress/wp-includes/class-simplepie.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:47 +0000] "GET /pgs.phP7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:47 +0000] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:48 +0000] "GET /wp-content/languages/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:48 +0000] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:48 +0000] "GET /wp-admin/maint/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.44 - - [13/Feb/2026:13:30:48 +0000] "GET /wp-admin/maint/moon.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:48 +0000] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:49 +0000] "GET /header.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:30:49 +0000] "GET /gecko.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:49 +0000] "GET /Files/Mo0n.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:49 +0000] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:50 +0000] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:50 +0000] "GET /bk.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:50 +0000] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.44 - - [13/Feb/2026:13:30:50 +0000] "GET /templates/beez3/error.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.44 - - [13/Feb/2026:13:30:51 +0000] "GET /.well-known/pki-validation/BSTI.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:30:51 +0000] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:51 +0000] "GET /wp-admin/maint/pongs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:51 +0000] "GET /wp-content/uploads/config.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:51 +0000] "GET /.well-known/acme-challenge/dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:52 +0000] "GET /wp-includes/function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:52 +0000] "GET /about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:52 +0000] "GET /sym.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:30:53 +0000] "GET /templates/cassiopeia/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:30:53 +0000] "GET /wp-includes/images/votes.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:53 +0000] "GET /wp-content/hello.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:30:53 +0000] "GET /wp-content/uploads/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:53 +0000] "GET /update/403.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:54 +0000] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:54 +0000] "GET /sk.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:54 +0000] "GET /wp-content/x.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:55 +0000] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:55 +0000] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:55 +0000] "GET /wp-includes/certificates/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:55 +0000] "GET /images/Marvins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:56 +0000] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:56 +0000] "GET /.well-known/about.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:56 +0000] "GET /images/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:56 +0000] "GET /wp-includes/fonts/parx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.44 - - [13/Feb/2026:13:30:56 +0000] "GET /.well-known/pki-validation/aewso.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.44 - - [13/Feb/2026:13:30:57 +0000] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:57 +0000] "GET /wp-admin/user/network.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.44 - - [13/Feb/2026:13:30:57 +0000] "GET /sys.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:57 +0000] "GET /wp-admin/css/colors/blue/about.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:58 +0000] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.44 - - [13/Feb/2026:13:30:58 +0000] "GET /wp-user.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.44 - - [13/Feb/2026:13:30:58 +0000] "GET /customize.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:58 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:58 +0000] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:59 +0000] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:59 +0000] "GET /fm1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:30:59 +0000] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:30:59 +0000] "GET /wordpress/wp-content/uploads/anceaecs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:31:00 +0000] "GET /wp-settings.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:31:00 +0000] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.44 - - [13/Feb/2026:13:31:00 +0000] "GET /wp-file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:00 +0000] "GET /wp-content.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.44 - - [13/Feb/2026:13:31:01 +0000] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:31:01 +0000] "GET /log.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.44 - - [13/Feb/2026:13:31:01 +0000] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:01 +0000] "GET /ioxi01.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.44 - - [13/Feb/2026:13:31:01 +0000] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:31:02 +0000] "GET /l/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:02 +0000] "GET /wp-includes/js/item.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.44 - - [13/Feb/2026:13:31:02 +0000] "GET /x/index.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:02 +0000] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:03 +0000] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.44 - - [13/Feb/2026:13:31:03 +0000] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.44 - - [13/Feb/2026:13:31:03 +0000] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:31:03 +0000] "GET /wp-content/wp-atom.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:03 +0000] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:04 +0000] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:04 +0000] "GET /wp-includes/mani.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:04 +0000] "GET /xx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:05 +0000] "GET /.well-known/index.php?p= HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:05 +0000] "GET /cgi-bin/cyohbodf.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:05 +0000] "GET /css/content.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:05 +0000] "GET /.well-known/Ex34L.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.44 - - [13/Feb/2026:13:31:05 +0000] "GET /wp-admin/css/colors/room.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.44 - - [13/Feb/2026:13:31:06 +0000] "GET /wp-content/uploads/wpr-addons/forms/rk.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:06 +0000] "GET /randkeyword.PhP8 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:06 +0000] "GET /wp-includes/network.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:06 +0000] "GET /images.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:07 +0000] "GET /wp-aespa.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:07 +0000] "GET /wp-includes/defaults.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:07 +0000] "GET /cgi-bin/install.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.44 - - [13/Feb/2026:13:31:07 +0000] "GET /wp-admin/includes/doc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:07 +0000] "GET /wp-admin/css/about.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.44 - - [13/Feb/2026:13:31:08 +0000] "GET /.well-known/include.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:08 +0000] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:08 +0000] "GET /wp-content/product.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:09 +0000] "GET /wp-admin/css/colors/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:09 +0000] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.44 - - [13/Feb/2026:13:31:09 +0000] "GET /wp-content/x/index.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:09 +0000] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.8 - - [13/Feb/2026:13:31:10 +0000] "GET /wp-includes/block-supports/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.8 - - [13/Feb/2026:13:31:10 +0000] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:10 +0000] "GET /wp-l0gin.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:10 +0000] "GET /backup/sid.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.8 - - [13/Feb/2026:13:31:11 +0000] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.8 - - [13/Feb/2026:13:31:11 +0000] "GET /wp-content/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:11 +0000] "GET /.well-known/bosctspi.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:11 +0000] "GET /wp-content/uploads/wpr-addons/forms/CasperSecurity.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:12 +0000] "GET /.well-known/atomlib.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:12 +0000] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.8 - - [13/Feb/2026:13:31:12 +0000] "GET /wp-conflg.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:12 +0000] "GET /wp-includes/Requests/xBrain.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:12 +0000] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:13 +0000] "GET /wp-admin/defaults.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:13 +0000] "GET /wp-includes/Requests/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:13 +0000] "GET /images/worksec.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:13 +0000] "GET /images/rest.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:14 +0000] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.8 - - [13/Feb/2026:13:31:14 +0000] "GET /wp-admin/images/classsmtps.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.8 - - [13/Feb/2026:13:31:14 +0000] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:14 +0000] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:15 +0000] "GET /baxa1.phP7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:15 +0000] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:15 +0000] "GET /.well-known/xoxo.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.8 - - [13/Feb/2026:13:31:15 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:15 +0000] "GET /0x.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:16 +0000] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:16 +0000] "GET /wp-content/mu-plugins/parx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:16 +0000] "GET /.well-known/pki-validation/infos.php HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:17 +0000] "GET /wpn.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:17 +0000] "GET /cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:17 +0000] "GET /upload.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.8 - - [13/Feb/2026:13:31:17 +0000] "GET /init.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:18 +0000] "GET /wp-admin/users.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:18 +0000] "GET /wp-blog.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:18 +0000] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.8 - - [13/Feb/2026:13:31:18 +0000] "GET /wp-admin/images/module.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.8 - - [13/Feb/2026:13:31:18 +0000] "GET /wp-includes/radio.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:19 +0000] "GET /admin/controller/extension/wpm.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.8 - - [13/Feb/2026:13:31:19 +0000] "GET /payout.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.8 - - [13/Feb/2026:13:31:19 +0000] "GET /lock360.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:20 +0000] "GET /x.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:20 +0000] "GET /wp_info.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:20 +0000] "GET /wp-content/upload.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:20 +0000] "GET /xml.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.8 - - [13/Feb/2026:13:31:21 +0000] "GET /by.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:21 +0000] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.8 - - [13/Feb/2026:13:31:21 +0000] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.8 - - [13/Feb/2026:13:31:21 +0000] "GET /wp-admin/includes/users.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.8 - - [13/Feb/2026:13:31:22 +0000] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.8 - - [13/Feb/2026:13:31:22 +0000] "GET /wp-admin/alfa.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:22 +0000] "GET /wp-content/up.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.8 - - [13/Feb/2026:13:31:22 +0000] "GET /wp-admin/dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.8 - - [13/Feb/2026:13:31:22 +0000] "GET /wp-includes/wp-class.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:23 +0000] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:23 +0000] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:23 +0000] "GET /default.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.8 - - [13/Feb/2026:13:31:23 +0000] "GET /fox.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:24 +0000] "GET /google.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:24 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:24 +0000] "GET /ovatools.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:24 +0000] "GET /sidwso.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.8 - - [13/Feb/2026:13:31:25 +0000] "GET /worksec.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.8 - - [13/Feb/2026:13:31:25 +0000] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.8 - - [13/Feb/2026:13:31:25 +0000] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:25 +0000] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:26 +0000] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:26 +0000] "GET /wp-includes/random_compat/about.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:26 +0000] "GET /wp-admin/includes/themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.8 - - [13/Feb/2026:13:31:26 +0000] "GET /Simple.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.8 - - [13/Feb/2026:13:31:27 +0000] "GET /wp-blog-header.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:27 +0000] "GET /style2.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:27 +0000] "GET /wp-scripts.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:27 +0000] "GET /adminfuns.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:27 +0000] "GET /cjfuns.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:28 +0000] "GET /comfunctions.php HTTP/1.1" 200 8 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:28 +0000] "GET /delpaths.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:28 +0000] "GET /epinyins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.8 - - [13/Feb/2026:13:31:28 +0000] "GET /filefuns.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:29 +0000] "GET /hinfofuns.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.8 - - [13/Feb/2026:13:31:29 +0000] "GET /qfunctions.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:29 +0000] "GET /qinfofuns.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:29 +0000] "GET /thoms.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:29 +0000] "GET /postnews.php HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.8 - - [13/Feb/2026:13:31:30 +0000] "GET /admin-ajax.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:30 +0000] "GET /link.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:30 +0000] "GET /ms-themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.8 - - [13/Feb/2026:13:31:31 +0000] "GET /my-sites.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:31 +0000] "GET /media.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.8 - - [13/Feb/2026:13:31:31 +0000] "GET /nav-menus.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.8 - - [13/Feb/2026:13:31:31 +0000] "GET /menu.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:31 +0000] "GET /options-head.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.8 - - [13/Feb/2026:13:31:32 +0000] "GET /revision.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:32 +0000] "GET /widgets.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.8 - - [13/Feb/2026:13:31:32 +0000] "GET /term.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:32 +0000] "GET /system_log.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:33 +0000] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:33 +0000] "GET /moded.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.8 - - [13/Feb/2026:13:31:33 +0000] "GET /wp-includes/images/include.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.8 - - [13/Feb/2026:13:31:33 +0000] "GET /upgrade.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:34 +0000] "GET /gh.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:34 +0000] "GET /version.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:34 +0000] "GET /head.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:35 +0000] "GET /index1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:35 +0000] "GET /theme-insqbzk.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.33 - - [13/Feb/2026:13:31:35 +0000] "GET /good.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:35 +0000] "GET /main.php HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.33 - - [13/Feb/2026:13:31:36 +0000] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 404 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:36 +0000] "GET /wsoyanz.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.33 - - [13/Feb/2026:13:31:36 +0000] "GET /wp-includes/fonts/css.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:36 +0000] "GET /wp-content/updates.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.33 - - [13/Feb/2026:13:31:36 +0000] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:37 +0000] "GET /wp-admin/images/install.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:37 +0000] "GET /alfa-rex.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:37 +0000] "GET /wp-admin/network/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:38 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:38 +0000] "GET /css/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:38 +0000] "GET /wp-admin/user/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:38 +0000] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:39 +0000] "GET /wp-admin/images/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:39 +0000] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:39 +0000] "GET /wp-admin/cloud.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:39 +0000] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:40 +0000] "GET /wp-includes/wso112233.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:40 +0000] "GET /wp-includes/shell20211028.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:40 +0000] "GET /.well-known/bala.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:40 +0000] "GET /wp-content/dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.61.41.33 - - [13/Feb/2026:13:31:41 +0000] "GET /wp-includes/dropdown.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:41 +0000] "GET /wp-admin/repeater.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:41 +0000] "GET /wp-includes/repeater.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:41 +0000] "GET /wp-content/repeater.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:42 +0000] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.33 - - [13/Feb/2026:13:31:42 +0000] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:42 +0000] "GET /cache-compat.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:42 +0000] "GET /ajax-actions.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:43 +0000] "GET /wp-admin/ajax-actions.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:43 +0000] "GET /wp-consar.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:43 +0000] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:43 +0000] "GET /alfanew.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.33 - - [13/Feb/2026:13:31:43 +0000] "GET /adminfuns.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:44 +0000] "GET /alfanew2.php7 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:44 +0000] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.33 - - [13/Feb/2026:13:31:44 +0000] "GET /wp-content/style-css.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:44 +0000] "GET /wp-admin/wp-configs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:45 +0000] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:45 +0000] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:45 +0000] "GET /cgi-bin/mariju.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:45 +0000] "GET /wp-includes/css/options.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:45 +0000] "GET /sx.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:46 +0000] "GET /wp-content/content.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:46 +0000] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:46 +0000] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.33 - - [13/Feb/2026:13:31:47 +0000] "GET /update/gely.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:47 +0000] "GET /.well-known/index.php HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:47 +0000] "GET /images/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.33 - - [13/Feb/2026:13:31:47 +0000] "GET /web.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.33 - - [13/Feb/2026:13:31:48 +0000] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:48 +0000] "GET /wp-admin/css/colors/content.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:48 +0000] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:48 +0000] "GET /wp-uploads-config.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:48 +0000] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.33 - - [13/Feb/2026:13:31:49 +0000] "GET /wp-admin/images/plugins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:49 +0000] "GET /wp-admin/user/file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:49 +0000] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:49 +0000] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:50 +0000] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:50 +0000] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:50 +0000] "GET /upload.php?mr=exe3/themes.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.33 - - [13/Feb/2026:13:31:50 +0000] "GET /wp-includes/wp-includes/admin-bar.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:51 +0000] "GET /indeex.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.33 - - [13/Feb/2026:13:31:51 +0000] "GET /dropdown.php?p= HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:51 +0000] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:52 +0000] "GET /wp-admin/images/moon.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:52 +0000] "GET /wp-includes/customize/plugins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:52 +0000] "GET /bs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.61.41.33 - - [13/Feb/2026:13:31:52 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.33 - - [13/Feb/2026:13:31:53 +0000] "GET /credits.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:53 +0000] "GET /edit-comments.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:53 +0000] "GET /checkbox.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.33 - - [13/Feb/2026:13:31:53 +0000] "GET /export.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:53 +0000] "GET /input.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:54 +0000] "GET /load-scripts.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.33 - - [13/Feb/2026:13:31:54 +0000] "GET /load-styles.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:54 +0000] "GET /options-discussion.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:54 +0000] "GET /options-general.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:55 +0000] "GET /options-permalink.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:55 +0000] "GET /options-privacy.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:55 +0000] "GET /options-reading.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:55 +0000] "GET /options-writing.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.33 - - [13/Feb/2026:13:31:56 +0000] "GET /post-new.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.61.41.33 - - [13/Feb/2026:13:31:56 +0000] "GET /privacy.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:56 +0000] "GET /profile.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:56 +0000] "GET /site-health.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:57 +0000] "GET /tools.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.33 - - [13/Feb/2026:13:31:57 +0000] "GET /update-core.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:57 +0000] "GET /user-edit.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:57 +0000] "GET /user-new.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:58 +0000] "GET /wp-cron.php?ac=3/wp-by-login.php HTTP/1.1" 200 503 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.33 - - [13/Feb/2026:13:31:58 +0000] "GET /bar.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:58 +0000] "GET /samll.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.33 - - [13/Feb/2026:13:31:59 +0000] "GET /webdb.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.36 - - [13/Feb/2026:13:32:14 +0000] "GET /.well-known/ HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.36 - - [13/Feb/2026:13:32:14 +0000] "GET /.well-known/pki-validation/ HTTP/1.1" 200 896 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:15 +0000] "GET /.well-known/acme-challenge/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:15 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:15 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:15 +0000] "GET /wp-content/themes/tflow/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.36 - - [13/Feb/2026:13:32:16 +0000] "GET /wp-admin/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:16 +0000] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:16 +0000] "GET /wp-admin/js/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.36 - - [13/Feb/2026:13:32:16 +0000] "GET /ALFA_DATA/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.61.41.36 - - [13/Feb/2026:13:32:16 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:17 +0000] "GET /wp-admin/css/colors/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.36 - - [13/Feb/2026:13:32:17 +0000] "GET /wp-includes/css/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:17 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:18 +0000] "GET /wp-includes/Requests/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.36 - - [13/Feb/2026:13:32:18 +0000] "GET /wp-includes/blocks/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:18 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.36 - - [13/Feb/2026:13:32:18 +0000] "GET /wp-includes/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.36 - - [13/Feb/2026:13:32:19 +0000] "GET /wp-admin/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.61.41.36 - - [13/Feb/2026:13:32:19 +0000] "GET /wp-admin/maint/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:19 +0000] "GET /wp-admin/meta/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:19 +0000] "GET /wp-admin/network/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:19 +0000] "GET /wp-admin/user/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.36 - - [13/Feb/2026:13:32:20 +0000] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:20 +0000] "GET /wp-content/uploads/2021/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.61.41.36 - - [13/Feb/2026:13:32:20 +0000] "GET /wp-content/plugins/elementor/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:20 +0000] "GET /wp-content/mu-plugins/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.36 - - [13/Feb/2026:13:32:21 +0000] "GET /upload/image/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.61.41.36 - - [13/Feb/2026:13:32:21 +0000] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:21 +0000] "GET /wordpress/wp-includes/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:22 +0000] "GET /blog/wp-includes/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.61.41.36 - - [13/Feb/2026:13:32:22 +0000] "GET /sites/default/files/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:22 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.36 - - [13/Feb/2026:13:32:22 +0000] "GET /admin/editor/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:22 +0000] "GET /admin/images/slider/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.61.41.36 - - [13/Feb/2026:13:32:23 +0000] "GET /admin/tmp/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.36 - - [13/Feb/2026:13:32:23 +0000] "GET /admin/uploads/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.61.41.36 - - [13/Feb/2026:13:32:23 +0000] "GET /Admin/uploads/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:23 +0000] "GET /admin/uploads/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.61.41.36 - - [13/Feb/2026:13:32:24 +0000] "GET /administrator/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.61.41.36 - - [13/Feb/2026:13:32:24 +0000] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.61.41.36 - - [13/Feb/2026:13:32:24 +0000] "GET /assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.61.41.36 - - [13/Feb/2026:13:32:24 +0000] "GET /cgi-bin/ HTTP/1.1" 200 2291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.61.41.36 - - [13/Feb/2026:13:32:25 +0000] "GET /cgi-bin/api_405645f5.php HTTP/1.1" 200 15738 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 51.68.236.69 - - [13/Feb/2026:18:04:17 +0000] "GET /robots.txt HTTP/1.1" 200 81 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.236.69 - - [13/Feb/2026:18:04:17 +0000] "GET / HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 103.112.59.139 - - [13/Feb/2026:18:39:41 +0000] "GET /cgi-bin/api_405645f5.php HTTP/1.1" 200 15740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 103.112.59.139 - - [13/Feb/2026:18:39:50 +0000] "GET /favicon.ico HTTP/1.1" 200 1092 "http://super7script.xyz/cgi-bin/api_405645f5.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 103.112.59.139 - - [13/Feb/2026:18:40:01 +0000] "POST /cgi-bin/api_405645f5.php HTTP/1.1" 200 51051 "http://super7script.xyz/cgi-bin/api_405645f5.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 167.172.217.19 - - [13/Feb/2026:18:50:14 +0000] "GET /cgi-bin/api_405645f5.php HTTP/1.1" 200 15740 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 167.172.217.19 - - [13/Feb/2026:18:50:15 +0000] "POST /cgi-bin/api_405645f5.php HTTP/1.1" 200 16358 "http://super7script.xyz/cgi-bin/api_405645f5.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 167.172.217.19 - - [13/Feb/2026:18:50:15 +0000] "GET /cgi-bin/p.php HTTP/1.1" 200 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 167.172.217.19 - - [13/Feb/2026:18:52:36 +0000] "POST /cgi-bin/p.php?actmet1 HTTP/1.1" 200 14131 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 167.172.217.19 - - [13/Feb/2026:18:52:41 +0000] "GET /dhaxstpu.php HTTP/1.1" 200 137 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 167.172.217.19 - - [13/Feb/2026:18:52:42 +0000] "POST /dhaxstpu.php?bak HTTP/1.1" 200 585 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 167.172.217.19 - - [13/Feb/2026:18:52:50 +0000] "POST /cgi-bin/p.php?actmet2 HTTP/1.1" 200 165 "-" "Mozilla/5.0(Windows NT 10.0; Win64; x64) AppleWebKit/537.36(KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 167.172.217.19 - - [13/Feb/2026:18:54:38 +0000] "GET /dhaxstpu.php HTTP/1.1" 200 138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 167.172.217.19 - - [13/Feb/2026:18:54:39 +0000] "POST /dhaxstpu.php HTTP/1.1" 200 376 "http://super7script.xyz/dhaxstpu.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 167.172.217.19 - - [13/Feb/2026:18:54:39 +0000] "GET /av.php HTTP/1.1" 200 341653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:16 +0000] "GET /administrator/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:16 +0000] "GET /administrator/index.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:17 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:17 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:17 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:18 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:18 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:18 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:18 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:18 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:19 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:19 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:19 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:19 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:19 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:20 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:20 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:20 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:20 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:20 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:21 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:21 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:21 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:21 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:21 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:22 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:22 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:22 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:22 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:23 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:23 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:23 +0000] "GET /wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:23 +0000] "GET /wp-admin/style.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:23 +0000] "GET /new.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:24 +0000] "GET /wefile.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:24 +0000] "GET /css HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:24 +0000] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:24 +0000] "GET /TRXscanner.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:24 +0000] "GET /amplp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:25 +0000] "GET /wp-content/style.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:25 +0000] "GET /wp-includes/style.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:25 +0000] "GET /wp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:25 +0000] "GET /file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:25 +0000] "GET /wp-content/akp.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:26 +0000] "GET /aw.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:26 +0000] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:26 +0000] "GET /simple.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:26 +0000] "GET /wp-login.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:26 +0000] "GET /xmlrpc.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:27 +0000] "GET /admin.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:27 +0000] "GET /install.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:27 +0000] "GET /wp-blog-header.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:28 +0000] "GET /wp-cli.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:28 +0000] "GET /options.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:28 +0000] "GET /click.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:29 +0000] "GET /saiga.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:29 +0000] "GET /gifclass.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:29 +0000] "GET /cord.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:29 +0000] "GET /3.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:29 +0000] "GET /BDKR28WP.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:30 +0000] "GET /inputs.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:30 +0000] "GET /wp-cron.php HTTP/1.1" 200 503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:30 +0000] "GET /wordfence-waf.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:30 +0000] "GET /wp-blog.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:30 +0000] "GET /wp-confiq.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:31 +0000] "GET /file.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:31 +0000] "GET /uploads/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:31 +0000] "GET /images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:31 +0000] "GET /js/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:32 +0000] "GET /includes/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:32 +0000] "GET /inc/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:32 +0000] "GET /.tmp/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:32 +0000] "GET /assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:32 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:33 +0000] "GET /wp-content/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:33 +0000] "GET /wp-content/js/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:33 +0000] "GET /wp-includes/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:33 +0000] "GET /wp-includes/js/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:33 +0000] "GET /wp-admin/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:34 +0000] "GET /wp-admin/js/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:34 +0000] "GET /.well-known/ HTTP/1.1" 403 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:34 +0000] "GET /.well-known/acme-challenge/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:34 +0000] "GET /wp-admin/includes/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:35 +0000] "GET /wp-admin/includes/maint/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:35 +0000] "GET /shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:35 +0000] "GET /c99.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:35 +0000] "GET /r57.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:35 +0000] "GET /wp-content/backup.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:36 +0000] "GET /wp-admin/user/c99.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:36 +0000] "GET /wp-includes/c99.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:36 +0000] "GET /images/shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:36 +0000] "GET /uploads/shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:37 +0000] "GET /assets/shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:37 +0000] "GET /js/myshell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:37 +0000] "GET /inc/backdoor.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:37 +0000] "GET /includes/shell.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:37 +0000] "GET /.tmp/c99.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:38 +0000] "GET /moon3.php HTTP/1.1" 200 15 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:38 +0000] "GET /click.php HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:39 +0000] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:39 +0000] "GET /wp-content/themes/twentytwentythree/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:39 +0000] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:39 +0000] "GET /wp-content/themes/twentytwentytwo/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:39 +0000] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:40 +0000] "GET /wp-content/themes/twentytwentyone/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:40 +0000] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:40 +0000] "GET /wp-content/themes/twentytwenty/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:41 +0000] "GET /wp-content/themes/twentynineteen/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:41 +0000] "GET /wp-content/themes/twentynineteen/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:41 +0000] "GET /wp-content/themes/astra/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:41 +0000] "GET /wp-content/themes/astra/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:41 +0000] "GET /wp-content/themes/hello-elementor/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:41 +0000] "GET /wp-content/themes/hello-elementor/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:42 +0000] "GET /wp-content/themes/generatepress/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:42 +0000] "GET /wp-content/themes/generatepress/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:42 +0000] "GET /wp-content/themes/oceanwp/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:42 +0000] "GET /wp-content/themes/oceanwp/images/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:43 +0000] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:43 +0000] "GET /wp-content/plugins/contact-form-7/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:43 +0000] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:43 +0000] "GET /wp-content/plugins/woocommerce/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:43 +0000] "GET /wp-content/plugins/akismet/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:44 +0000] "GET /wp-content/plugins/akismet/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:44 +0000] "GET /wp-content/plugins/jetpack/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:44 +0000] "GET /wp-content/plugins/jetpack/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:44 +0000] "GET /wp-content/plugins/elementor/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:44 +0000] "GET /wp-content/plugins/elementor/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:45 +0000] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:45 +0000] "GET /wp-content/plugins/wordpress-seo/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:45 +0000] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:45 +0000] "GET /wp-content/plugins/classic-editor/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:45 +0000] "GET /wp-content/plugins/wpforms-lite/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:46 +0000] "GET /wp-content/plugins/wpforms-lite/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:46 +0000] "GET /wp-content/plugins/updraftplus/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:46 +0000] "GET /wp-content/plugins/updraftplus/assets/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:46 +0000] "GET /wp-content/uploads/2026/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:46 +0000] "GET /wp-content/uploads/2026/01/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:47 +0000] "GET /wp-content/uploads/2025/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:47 +0000] "GET /wp-content/uploads/2025/01/ HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 139.99.34.216 - - [13/Feb/2026:18:57:47 +0000] "GET /images/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:48 +0000] "GET /assets/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:48 +0000] "GET /.well-known/ HTTP/1.1" 403 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:48 +0000] "GET /uploads/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:49 +0000] "GET /js/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:49 +0000] "GET /includes/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:50 +0000] "GET /inc/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:50 +0000] "GET /.tmp/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:50 +0000] "GET /wp-content/uploads/2015/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:51 +0000] "GET /wp-content/uploads/2016/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:51 +0000] "GET /wp-content/uploads/2017/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:52 +0000] "GET /wp-content/uploads/2018/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:52 +0000] "GET /wp-content/uploads/2019/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:52 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:53 +0000] "GET /wp-includes/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:53 +0000] "GET /wp-admin/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:54 +0000] "GET /wp-content/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:54 +0000] "GET /wp-content/themes/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 167.172.217.19 - - [13/Feb/2026:18:57:54 +0000] "GET /cgi-bin/api_405645f5.php HTTP/1.1" 200 17663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" 167.172.217.19 - - [13/Feb/2026:18:57:54 +0000] "GET /cgi-bin/api_405645f5.php HTTP/1.1" 200 17663 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A" 139.99.34.216 - - [13/Feb/2026:18:57:54 +0000] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:55 +0000] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:55 +0000] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:56 +0000] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:56 +0000] "GET /wp-content/themes/twentynineteen/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:56 +0000] "GET /wp-content/plugins/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:57 +0000] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:57 +0000] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:58 +0000] "GET /wp-content/plugins/akismet/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:58 +0000] "GET /wp-content/plugins/jetpack/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:58 +0000] "GET /wp-content/plugins/elementor/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:59 +0000] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:57:59 +0000] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:00 +0000] "GET /wp-content/plugins/wpforms-lite/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:00 +0000] "GET /wp-content/plugins/updraftplus/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:00 +0000] "GET /wp-content/plugins/wordfence/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:01 +0000] "GET /wp-content/cache/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:01 +0000] "GET /wp-content/wflogs/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:02 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:02 +0000] "GET /wp-admin/includes/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:03 +0000] "GET /wp-admin/images/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:03 +0000] "GET /wp-admin/js/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:03 +0000] "GET /wp-admin/css/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:04 +0000] "GET /wp-includes/images/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:04 +0000] "GET /wp-includes/js/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:05 +0000] "GET /wp-includes/css/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:05 +0000] "GET /wp-content/images/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:05 +0000] "GET /wp-content/js/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:06 +0000] "GET /wp-content/includes/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:06 +0000] "GET /wp-content/inc/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:07 +0000] "GET /wp-content/.tmp/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 139.99.34.216 - - [13/Feb/2026:18:58:07 +0000] "GET /wp-content/assets/ HTTP/1.1" 200 1092 "-" "python-requests/2.32.5" 43.135.145.73 - - [13/Feb/2026:19:43:19 +0000] "GET / HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.100.35 - - [13/Feb/2026:20:39:20 +0000] "GET / HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 223.15.245.170 - - [13/Feb/2026:23:08:03 +0000] "GET / HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 178.128.32.63 - - [14/Feb/2026:02:04:20 +0000] "GET / HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 178.128.32.63 - - [14/Feb/2026:02:04:21 +0000] "GET /favicon.ico HTTP/1.1" 200 1092 "http://super7script.xyz/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 93.158.90.69 - - [14/Feb/2026:02:51:09 +0000] "GET / HTTP/1.1" 200 1092 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3"
Edit
Rename
Chmod
Delete
FILE
FOLDER
Name
Size
Permission
Action
14bikecocom.ampcuan123.lol
2576356 bytes
0640
14bikecocom.ampcuan123.lol-ssl_log
2381916 bytes
0640
44inchchestfilm.com.ampcuan123.lol
0 bytes
0640
44inchchestfilm.com.ampcuan123.lol-ssl_log
27225108 bytes
0640
adminterpercaya.pro.ampcuan123.lol
61186 bytes
0640
adminterpercaya.pro.ampcuan123.lol-ssl_log
51207 bytes
0640
adminterpercaya.store.ampcuan123.lol
0 bytes
0640
adminterpercaya.store.ampcuan123.lol-ssl_log
0 bytes
0640
akunverifikasi-amp.xyz.ampcuan123.lol
0 bytes
0640
akunverifikasi.com.ampcuan123.lol
0 bytes
0640
akunverifikasi.com.ampcuan123.lol-ssl_log
0 bytes
0640
alsulta-alrabea.com.ampcuan123.lol
0 bytes
0640
ambisi.lpmplampung.id
0 bytes
0640
americanfoxhoundclub.org.ampcuan123.lol
0 bytes
0640
amp-super7.registerspaces.com
0 bytes
0640
amp-super7.registerspaces.com-ssl_log
0 bytes
0640
ampbotak123.lol.ampcuan123.lol
0 bytes
0640
ampbotak123.lol.ampcuan123.lol-ssl_log
0 bytes
0640
ampcandu123.lol.ampcuan123.lol
0 bytes
0640
ampcandu123.lol.ampcuan123.lol-ssl_log
0 bytes
0640
ampcuan123.lol
0 bytes
0640
ampcuan123.lol-ssl_log
0 bytes
0640
ampjablay123.lol.ampcuan123.lol
0 bytes
0640
ampjablay123.lol.ampcuan123.lol-ssl_log
0 bytes
0640
ampjablay123.registerspaces.com
0 bytes
0640
ampjablay123.registerspaces.com-ssl_log
0 bytes
0640
ampkingcuan123.xyz.ampcuan123.lol
0 bytes
0640
ampkingcuan123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
ampompong188.registerspaces.com
0 bytes
0640
ampompong188.registerspaces.com-ssl_log
0 bytes
0640
ampraksasa123.lol.ampcuan123.lol
0 bytes
0640
ampraksasa123.lol.ampcuan123.lol-ssl_log
0 bytes
0640
ampsuper7.site.ampcuan123.lol
0 bytes
0640
ampsuper7.site.ampcuan123.lol-ssl_log
0 bytes
0640
ampsuper7.vip.ampcuan123.lol
0 bytes
0640
ampsuper7.vip.ampcuan123.lol-ssl_log
0 bytes
0640
ampsuper7blue.homes.ampcuan123.lol
0 bytes
0640
ampsuper7blue.homes.ampcuan123.lol-ssl_log
0 bytes
0640
ancientufo.org.ampcuan123.lol
4437 bytes
0640
ancientufo.org.ampcuan123.lol-ssl_log
608832 bytes
0640
applewoodnycom.ampcuan123.lol
147 bytes
0640
applewoodnycom.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt01.fun.ampcuan123.lol
0 bytes
0640
aptapt01.xyz.ampcuan123.lol
0 bytes
0640
aptapt01.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt02.fun.ampcuan123.lol
0 bytes
0640
aptapt02.fun.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt02.xyz.ampcuan123.lol
0 bytes
0640
aptapt02.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt03.fun.ampcuan123.lol
0 bytes
0640
aptapt03.xyz.ampcuan123.lol
0 bytes
0640
aptapt03.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt04.fun.ampcuan123.lol
0 bytes
0640
aptapt04.xyz.ampcuan123.lol
0 bytes
0640
aptapt04.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt05.fun.ampcuan123.lol
0 bytes
0640
aptapt05.xyz.ampcuan123.lol
0 bytes
0640
aptapt05.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt06.fun.ampcuan123.lol
0 bytes
0640
aptapt06.xyz.ampcuan123.lol
0 bytes
0640
aptapt06.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt07.fun.ampcuan123.lol
0 bytes
0640
aptapt07.xyz.ampcuan123.lol
0 bytes
0640
aptapt07.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt08.fun.ampcuan123.lol
0 bytes
0640
aptapt08.xyz.ampcuan123.lol
0 bytes
0640
aptapt08.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt09.fun.ampcuan123.lol
0 bytes
0640
aptapt09.xyz.ampcuan123.lol
0 bytes
0640
aptapt09.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt10.fun.ampcuan123.lol
0 bytes
0640
aptapt10.xyz.ampcuan123.lol
0 bytes
0640
aptapt10.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt11.fun.ampcuan123.lol
0 bytes
0640
aptapt11.xyz.ampcuan123.lol
0 bytes
0640
aptapt12.fun.ampcuan123.lol
0 bytes
0640
aptapt12.xyz.ampcuan123.lol
0 bytes
0640
aptapt13.fun.ampcuan123.lol
0 bytes
0640
aptapt13.xyz.ampcuan123.lol
0 bytes
0640
aptapt14.fun.ampcuan123.lol
0 bytes
0640
aptapt14.xyz.ampcuan123.lol
0 bytes
0640
aptapt15.fun.ampcuan123.lol
0 bytes
0640
aptapt15.xyz.ampcuan123.lol
0 bytes
0640
aptapt16.fun.ampcuan123.lol
0 bytes
0640
aptapt16.xyz.ampcuan123.lol
0 bytes
0640
aptapt17.fun.ampcuan123.lol
0 bytes
0640
aptapt17.xyz.ampcuan123.lol
0 bytes
0640
aptapt18.fun.ampcuan123.lol
0 bytes
0640
aptapt18.fun.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt18.xyz.ampcuan123.lol
0 bytes
0640
aptapt19.fun.ampcuan123.lol
0 bytes
0640
aptapt19.fun.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt19.xyz.ampcuan123.lol
0 bytes
0640
aptapt20.fun.ampcuan123.lol
0 bytes
0640
aptapt20.fun.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt20.xyz.ampcuan123.lol
0 bytes
0640
aptapt21.fun.ampcuan123.lol
0 bytes
0640
aptapt21.xyz.ampcuan123.lol
0 bytes
0640
aptapt22.fun.ampcuan123.lol
0 bytes
0640
aptapt22.xyz.ampcuan123.lol
0 bytes
0640
aptapt23.fun.ampcuan123.lol
0 bytes
0640
aptapt23.xyz.ampcuan123.lol
0 bytes
0640
aptapt24.fun.ampcuan123.lol
0 bytes
0640
aptapt24.xyz.ampcuan123.lol
0 bytes
0640
aptapt25.fun.ampcuan123.lol
0 bytes
0640
aptapt25.xyz.ampcuan123.lol
0 bytes
0640
aptapt26.fun.ampcuan123.lol
0 bytes
0640
aptapt26.xyz.ampcuan123.lol
0 bytes
0640
aptapt27.fun.ampcuan123.lol
0 bytes
0640
aptapt27.xyz.ampcuan123.lol
0 bytes
0640
aptapt27.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
aptapt28.fun.ampcuan123.lol
0 bytes
0640
aptapt28.xyz.ampcuan123.lol
0 bytes
0640
aptapt29.fun.ampcuan123.lol
0 bytes
0640
aptapt29.xyz.ampcuan123.lol
0 bytes
0640
aptapt30.fun.ampcuan123.lol
0 bytes
0640
aptapt30.xyz.ampcuan123.lol
0 bytes
0640
asikinaja.vip.ampcuan123.lol
0 bytes
0640
asikinaja.vip.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja01.fun.ampcuan123.lol
0 bytes
0640
asikinaja02.fun.ampcuan123.lol
0 bytes
0640
asikinaja03.fun.ampcuan123.lol
0 bytes
0640
asikinaja04.fun.ampcuan123.lol
0 bytes
0640
asikinaja05.fun.ampcuan123.lol
0 bytes
0640
asikinaja06.fun.ampcuan123.lol
0 bytes
0640
asikinaja07.fun.ampcuan123.lol
0 bytes
0640
asikinaja08.fun.ampcuan123.lol
0 bytes
0640
asikinaja08.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja09.fun.ampcuan123.lol
0 bytes
0640
asikinaja10.fun.ampcuan123.lol
0 bytes
0640
asikinaja11.fun.ampcuan123.lol
0 bytes
0640
asikinaja12.fun.ampcuan123.lol
0 bytes
0640
asikinaja13.fun.ampcuan123.lol
0 bytes
0640
asikinaja13.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja14.fun.ampcuan123.lol
0 bytes
0640
asikinaja14.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja15.fun.ampcuan123.lol
0 bytes
0640
asikinaja15.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja16.fun.ampcuan123.lol
0 bytes
0640
asikinaja16.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja17.fun.ampcuan123.lol
0 bytes
0640
asikinaja17.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja18.fun.ampcuan123.lol
0 bytes
0640
asikinaja18.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja19.fun.ampcuan123.lol
0 bytes
0640
asikinaja19.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja20.fun.ampcuan123.lol
0 bytes
0640
asikinaja20.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja21.fun.ampcuan123.lol
0 bytes
0640
asikinaja21.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja22.fun.ampcuan123.lol
0 bytes
0640
asikinaja22.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja23.fun.ampcuan123.lol
0 bytes
0640
asikinaja23.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja24.fun.ampcuan123.lol
0 bytes
0640
asikinaja24.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja25.fun.ampcuan123.lol
0 bytes
0640
asikinaja25.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja26.fun.ampcuan123.lol
0 bytes
0640
asikinaja26.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja27.fun.ampcuan123.lol
0 bytes
0640
asikinaja27.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja28.fun.ampcuan123.lol
0 bytes
0640
asikinaja28.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja29.fun.ampcuan123.lol
0 bytes
0640
asikinaja29.fun.ampcuan123.lol-ssl_log
0 bytes
0640
asikinaja30.fun.ampcuan123.lol
0 bytes
0640
asikinaja30.fun.ampcuan123.lol-ssl_log
0 bytes
0640
assets-game123.xyz.ampcuan123.lol
0 bytes
0640
assets-game123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
assets123.vip.ampcuan123.lol
0 bytes
0640
assets123.vip.ampcuan123.lol-ssl_log
0 bytes
0640
assetsindoxxilayarkaca21.com.ampcuan123.lol
0 bytes
0640
assetsindoxxilayarkaca21.com.ampcuan123.lol-ssl_log
0 bytes
0640
atelier-unes.com.ampcuan123.lol
0 bytes
0640
aviarioangelcabrera.com.ampcuan123.lol
121482 bytes
0640
aviarioangelcabrera.com.ampcuan123.lol-ssl_log
244747 bytes
0640
becekwin.registerspaces.com
0 bytes
0640
becekwin.registerspaces.com-ssl_log
0 bytes
0640
beritahits.com.ampcuan123.lol
0 bytes
0640
beritahits.com.ampcuan123.lol-ssl_log
0 bytes
0640
bestromanticinns.com.ampcuan123.lol
186 bytes
0640
bestromanticinns.com.ampcuan123.lol-ssl_log
0 bytes
0640
bestshotvideo.com.ampcuan123.lol
0 bytes
0640
bestshotvideo.com.ampcuan123.lol-ssl_log
792 bytes
0640
bfpvraorg.ampcuan123.lol
0 bytes
0640
bfpvraorg.ampcuan123.lol-ssl_log
0 bytes
0640
bigtroubleinlittlenappies.com.ampcuan123.lol
28224503 bytes
0640
bigtroubleinlittlenappies.com.ampcuan123.lol-ssl_log
0 bytes
0640
bluestarchronicles.com.ampcuan123.lol
0 bytes
0640
bluestarchronicles.com.ampcuan123.lol-ssl_log
1575 bytes
0640
bola.indoxxilayarkaca21.com
0 bytes
0640
bola.indoxxilayarkaca21.com-ssl_log
0 bytes
0640
botak123.super7seo.dev
0 bytes
0640
botak123.super7seo.dev-ssl_log
0 bytes
0640
botcheat.ink.ampcuan123.lol
0 bytes
0640
botcheat.ink.ampcuan123.lol-ssl_log
0 bytes
0640
bppk.sch.id.ampcuan123.lol
90024 bytes
0640
bppk.sch.id.ampcuan123.lol-ssl_log
93493 bytes
0640
brandolinofirenze.com.ampcuan123.lol
0 bytes
0640
brandolinofirenze.com.ampcuan123.lol-ssl_log
490085 bytes
0640
cafe-kanon.com.ampcuan123.lol
0 bytes
0640
cafe-kanon.com.ampcuan123.lol-ssl_log
0 bytes
0640
captivatingcuba.super7amp.com
0 bytes
0640
cb-blog.com.ampcuan123.lol
62753 bytes
0640
cb-blog.com.ampcuan123.lol-ssl_log
5485505 bytes
0640
celebratealaskahighway.com.ampcuan123.lol
0 bytes
0640
cheatengine01.fun.ampcuan123.lol
0 bytes
0640
cheatengine01.xyz.ampcuan123.lol
0 bytes
0640
cheatengine01.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine02.fun.ampcuan123.lol
0 bytes
0640
cheatengine02.fun.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine02.xyz.ampcuan123.lol
0 bytes
0640
cheatengine02.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine03.fun.ampcuan123.lol
0 bytes
0640
cheatengine03.xyz.ampcuan123.lol
0 bytes
0640
cheatengine03.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine04.fun.ampcuan123.lol
0 bytes
0640
cheatengine04.xyz.ampcuan123.lol
0 bytes
0640
cheatengine04.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine05.fun.ampcuan123.lol
0 bytes
0640
cheatengine05.xyz.ampcuan123.lol
0 bytes
0640
cheatengine05.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine06.fun.ampcuan123.lol
0 bytes
0640
cheatengine06.xyz.ampcuan123.lol
0 bytes
0640
cheatengine06.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine07.fun.ampcuan123.lol
0 bytes
0640
cheatengine07.xyz.ampcuan123.lol
0 bytes
0640
cheatengine07.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine08.fun.ampcuan123.lol
0 bytes
0640
cheatengine08.xyz.ampcuan123.lol
0 bytes
0640
cheatengine08.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine09.fun.ampcuan123.lol
0 bytes
0640
cheatengine09.xyz.ampcuan123.lol
0 bytes
0640
cheatengine09.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine10.fun.ampcuan123.lol
0 bytes
0640
cheatengine10.xyz.ampcuan123.lol
0 bytes
0640
cheatengine10.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine11.fun.ampcuan123.lol
0 bytes
0640
cheatengine11.xyz.ampcuan123.lol
0 bytes
0640
cheatengine11.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine12.fun.ampcuan123.lol
0 bytes
0640
cheatengine12.xyz.ampcuan123.lol
0 bytes
0640
cheatengine12.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine13.fun.ampcuan123.lol
0 bytes
0640
cheatengine13.xyz.ampcuan123.lol
0 bytes
0640
cheatengine13.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine14.fun.ampcuan123.lol
0 bytes
0640
cheatengine14.xyz.ampcuan123.lol
0 bytes
0640
cheatengine14.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine15.fun.ampcuan123.lol
0 bytes
0640
cheatengine15.xyz.ampcuan123.lol
0 bytes
0640
cheatengine15.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine16.fun.ampcuan123.lol
0 bytes
0640
cheatengine16.fun.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine16.xyz.ampcuan123.lol
0 bytes
0640
cheatengine16.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine17.fun.ampcuan123.lol
0 bytes
0640
cheatengine17.xyz.ampcuan123.lol
0 bytes
0640
cheatengine17.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine18.fun.ampcuan123.lol
0 bytes
0640
cheatengine18.xyz.ampcuan123.lol
0 bytes
0640
cheatengine18.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine19.fun.ampcuan123.lol
0 bytes
0640
cheatengine19.fun.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine19.xyz.ampcuan123.lol
0 bytes
0640
cheatengine19.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine20.fun.ampcuan123.lol
0 bytes
0640
cheatengine20.xyz.ampcuan123.lol
0 bytes
0640
cheatengine20.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine21.fun.ampcuan123.lol
0 bytes
0640
cheatengine22.fun.ampcuan123.lol
0 bytes
0640
cheatengine23.fun.ampcuan123.lol
0 bytes
0640
cheatengine24.fun.ampcuan123.lol
0 bytes
0640
cheatengine25.fun.ampcuan123.lol
0 bytes
0640
cheatengine26.fun.ampcuan123.lol
0 bytes
0640
cheatengine27.fun.ampcuan123.lol
0 bytes
0640
cheatengine27.fun.ampcuan123.lol-ssl_log
0 bytes
0640
cheatengine28.fun.ampcuan123.lol
0 bytes
0640
cheatengine29.fun.ampcuan123.lol
0 bytes
0640
cheatengine30.fun.ampcuan123.lol
0 bytes
0640
cheatmaxwin.serverpremium.pro
0 bytes
0640
cheatmaxwin.serverpremium.pro-ssl_log
0 bytes
0640
cheatpekalongan.autos.ampcuan123.lol
0 bytes
0640
cheatpekalongan.biz.ampcuan123.lol
0 bytes
0640
cheatpekalongan.biz.ampcuan123.lol-ssl_log
0 bytes
0640
cheatpekalongan.fun.ampcuan123.lol
0 bytes
0640
cheatpekalongan.homes.ampcuan123.lol
0 bytes
0640
cheatpekalongan.ink.ampcuan123.lol
0 bytes
0640
cheatpekalongan.ink.ampcuan123.lol-ssl_log
0 bytes
0640
cheatpekalongan.live.ampcuan123.lol
0 bytes
0640
cheatpekalongan.live.ampcuan123.lol-ssl_log
0 bytes
0640
cheatpekalongan.one.ampcuan123.lol
0 bytes
0640
cheatpekalongan.one.ampcuan123.lol-ssl_log
0 bytes
0640
cheatpekalongan.online.ampcuan123.lol
0 bytes
0640
cheatpekalongan.site.ampcuan123.lol
0 bytes
0640
cheatpekalongan.store.ampcuan123.lol
0 bytes
0640
cheatrobot.art.ampcuan123.lol
0 bytes
0640
cheatrobot.art.ampcuan123.lol-ssl_log
0 bytes
0640
cheetserver123.autos.ampcuan123.lol
0 bytes
0640
cheetserver123.autos.ampcuan123.lol-ssl_log
0 bytes
0640
cheetserver123.fun.ampcuan123.lol
0 bytes
0640
cheetserver123.homes.ampcuan123.lol
0 bytes
0640
cheetserver123.homes.ampcuan123.lol-ssl_log
0 bytes
0640
cheetserver123.ink.ampcuan123.lol
0 bytes
0640
cheetserver123.ink.ampcuan123.lol-ssl_log
0 bytes
0640
cheetserver123.one.ampcuan123.lol
0 bytes
0640
cheetserver123.one.ampcuan123.lol-ssl_log
0 bytes
0640
cheetserver123.online.ampcuan123.lol
0 bytes
0640
cheetserver123.site.ampcuan123.lol
0 bytes
0640
cheetserver123.store.ampcuan123.lol
0 bytes
0640
cheetserver123.xyz.ampcuan123.lol
0 bytes
0640
citserver.autos.ampcuan123.lol
0 bytes
0640
citserver.autos.ampcuan123.lol-ssl_log
0 bytes
0640
citserver.fun.ampcuan123.lol
0 bytes
0640
citserver.homes.ampcuan123.lol
0 bytes
0640
citserver.homes.ampcuan123.lol-ssl_log
0 bytes
0640
citserver.ink.ampcuan123.lol
0 bytes
0640
citserver.live.ampcuan123.lol
0 bytes
0640
citserver.live.ampcuan123.lol-ssl_log
0 bytes
0640
citserver.one.ampcuan123.lol
0 bytes
0640
citserver.one.ampcuan123.lol-ssl_log
0 bytes
0640
citserver.online.ampcuan123.lol
0 bytes
0640
citserver.site.ampcuan123.lol
0 bytes
0640
citserver.store.ampcuan123.lol
0 bytes
0640
citserver.xyz.ampcuan123.lol
0 bytes
0640
citserver.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
croissance-verte-net.super7sukses.dev
0 bytes
0640
croissance-verte-net.super7sukses.dev-ssl_log
0 bytes
0640
cuan123profit.com.ampcuan123.lol
0 bytes
0640
cuan123profit.com.ampcuan123.lol-ssl_log
0 bytes
0640
cuanbanget123.live.ampcuan123.lol
0 bytes
0640
cuanbanget123.live.ampcuan123.lol-ssl_log
0 bytes
0640
dailytelescope.com.ampcuan123.lol
0 bytes
0640
dailytelescope.com.ampcuan123.lol-ssl_log
5832 bytes
0640
destiners.com.ampcuan123.lol
0 bytes
0640
dicasparacasamento.com.ampcuan123.lol
0 bytes
0640
dicasparacasamento.com.ampcuan123.lol-ssl_log
0 bytes
0640
directbecekwin.click.ampcuan123.lol
0 bytes
0640
directbecekwin.click.ampcuan123.lol-ssl_log
0 bytes
0640
directbecekwin.site.ampcuan123.lol
0 bytes
0640
directbecekwin.site.ampcuan123.lol-ssl_log
0 bytes
0640
directbecekwin.xyz.ampcuan123.lol
0 bytes
0640
directbecekwin.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
directbotak123.click.ampcuan123.lol
0 bytes
0640
directbotak123.click.ampcuan123.lol-ssl_log
0 bytes
0640
directbotak123.site.ampcuan123.lol
0 bytes
0640
directbotak123.site.ampcuan123.lol-ssl_log
0 bytes
0640
directbotak123.xyz.ampcuan123.lol
0 bytes
0640
directbotak123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
directcandu123.click.ampcuan123.lol
0 bytes
0640
directcandu123.click.ampcuan123.lol-ssl_log
0 bytes
0640
directcandu123.site.ampcuan123.lol
0 bytes
0640
directcandu123.site.ampcuan123.lol-ssl_log
0 bytes
0640
directcandu123.xyz.ampcuan123.lol
0 bytes
0640
directcandu123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
directcuan123.click.ampcuan123.lol
0 bytes
0640
directcuan123.click.ampcuan123.lol-ssl_log
0 bytes
0640
directcuan123.site.ampcuan123.lol
0 bytes
0640
directcuan123.site.ampcuan123.lol-ssl_log
0 bytes
0640
directcuan123.xyz.ampcuan123.lol
0 bytes
0640
directcuan123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
directjablay123.click.ampcuan123.lol
0 bytes
0640
directjablay123.click.ampcuan123.lol-ssl_log
0 bytes
0640
directjablay123.site.ampcuan123.lol
0 bytes
0640
directjablay123.site.ampcuan123.lol-ssl_log
0 bytes
0640
directjablay123.xyz.ampcuan123.lol
0 bytes
0640
directjablay123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
directmampir123.click.ampcuan123.lol
0 bytes
0640
directmampir123.click.ampcuan123.lol-ssl_log
0 bytes
0640
directmampir123.site.ampcuan123.lol
0 bytes
0640
directmampir123.site.ampcuan123.lol-ssl_log
0 bytes
0640
directmampir123.xyz.ampcuan123.lol
0 bytes
0640
directmampir123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
directompong188.click.ampcuan123.lol
0 bytes
0640
directompong188.click.ampcuan123.lol-ssl_log
0 bytes
0640
directompong188.site.ampcuan123.lol
0 bytes
0640
directompong188.site.ampcuan123.lol-ssl_log
0 bytes
0640
directpasar123.click.ampcuan123.lol
0 bytes
0640
directpasar123.click.ampcuan123.lol-ssl_log
0 bytes
0640
directpasar123.site.ampcuan123.lol
0 bytes
0640
directpasar123.site.ampcuan123.lol-ssl_log
0 bytes
0640
directpasar123.xyz.ampcuan123.lol
0 bytes
0640
directpasar123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
directsakti123.click.ampcuan123.lol
0 bytes
0640
directsakti123.click.ampcuan123.lol-ssl_log
0 bytes
0640
directsakti123.site.ampcuan123.lol
0 bytes
0640
directsakti123.site.ampcuan123.lol-ssl_log
0 bytes
0640
directsakti123.xyz.ampcuan123.lol
0 bytes
0640
directsakti123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
drdenimjeans.net.ampcuan123.lol
0 bytes
0640
drdenimjeans.net.ampcuan123.lol-ssl_log
0 bytes
0640
durgianamandir.com.ampcuan123.lol
11048 bytes
0640
durgianamandir.com.ampcuan123.lol-ssl_log
18310 bytes
0640
enakkinaja01.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja01.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja02.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja02.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja03.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja03.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja04.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja04.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja05.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja05.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja06.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja07.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja07.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja08.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja08.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja09.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja09.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
enakkinaja10.xyz.ampcuan123.lol
0 bytes
0640
enakkinaja10.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
ergospelsingers.com.ampcuan123.lol
0 bytes
0640
ergospelsingers.com.ampcuan123.lol-ssl_log
0 bytes
0640
eventhosthub.com.ampcuan123.lol
0 bytes
0640
eventhosthub.com.ampcuan123.lol-ssl_log
0 bytes
0640
firsttravel.co.id.ampcuan123.lol
0 bytes
0640
firsttravel.co.id.ampcuan123.lol-ssl_log
0 bytes
0640
floridacountrysuperfest.com.ampcuan123.lol
397 bytes
0640
floridacountrysuperfest.com.ampcuan123.lol-ssl_log
14416 bytes
0640
forallintent.com.ampcuan123.lol
0 bytes
0640
forallintent.com.ampcuan123.lol-ssl_log
6329691 bytes
0640
free-amp.rumahwebspaces.com
0 bytes
0640
free-amp.rumahwebspaces.com-ssl_log
0 bytes
0640
galaxywin.live.ampcuan123.lol
0 bytes
0640
galaxywin.live.ampcuan123.lol-ssl_log
0 bytes
0640
gameraksasa123.com.ampcuan123.lol
0 bytes
0640
ghostworld-themovie.com.ampcuan123.lol
7244562 bytes
0640
ghostworld-themovie.com.ampcuan123.lol-ssl_log
0 bytes
0640
goodearthcafepdx.com.ampcuan123.lol
0 bytes
0640
goodearthcafepdx.com.ampcuan123.lol-ssl_log
0 bytes
0640
grya.co.id.ampcuan123.lol
0 bytes
0640
grya.co.id.ampcuan123.lol-ssl_log
0 bytes
0640
hack.cheatengine01.fun
0 bytes
0640
hellodogspotcom.ampcuan123.lol
0 bytes
0640
hellodogspotcom.ampcuan123.lol-ssl_log
0 bytes
0640
helmet-hub.com.ampcuan123.lol
0 bytes
0640
helmet-hub.com.ampcuan123.lol-ssl_log
0 bytes
0640
hujancuan123.live.ampcuan123.lol
0 bytes
0640
hujancuan123.live.ampcuan123.lol-ssl_log
0 bytes
0640
hujancuan123.pro.ampcuan123.lol
0 bytes
0640
hujancuan123.pro.ampcuan123.lol-ssl_log
0 bytes
0640
idlixlayarkaca21.com.ampcuan123.lol
0 bytes
0640
idlixlayarkaca21.com.ampcuan123.lol-ssl_log
0 bytes
0640
idmcsrl.com.ampcuan123.lol
0 bytes
0640
idmcsrl.com.ampcuan123.lol-ssl_log
0 bytes
0640
indietronica.org.ampcuan123.lol
0 bytes
0640
indoxxilayarkaca21.com.ampcuan123.lol
0 bytes
0640
indoxxilayarkaca21.com.ampcuan123.lol-ssl_log
0 bytes
0640
inspirationist.registerspaces.com
0 bytes
0640
inspirationist.registerspaces.com-ssl_log
0 bytes
0640
internship-navigation.com.ampcuan123.lol
0 bytes
0640
internship-navigation.com.ampcuan123.lol-ssl_log
0 bytes
0640
isback-ompong188.registerspaces.com
0 bytes
0640
isback-ompong188.registerspaces.com-ssl_log
0 bytes
0640
jablay123.com.ampcuan123.lol
0 bytes
0640
jablay123.com.ampcuan123.lol-ssl_log
0 bytes
0640
jablay123.registerspaces.com
0 bytes
0640
jablay123.registerspaces.com-ssl_log
0 bytes
0640
jablay123.super7sukses.dev
0 bytes
0640
jablay123.super7sukses.dev-ssl_log
0 bytes
0640
james-sherwood.com.ampcuan123.lol
0 bytes
0640
james-sherwood.com.ampcuan123.lol-ssl_log
0 bytes
0640
jeffersonhillsapts.com.ampcuan123.lol
5689623 bytes
0640
jeffersonhillsapts.com.ampcuan123.lol-ssl_log
0 bytes
0640
journeysinclassicfilm.rumahwebspaces.com
0 bytes
0640
journeysinclassicfilm.rumahwebspaces.com-ssl_log
0 bytes
0640
justaddcooking.com.ampcuan123.lol
3474 bytes
0640
justaddcooking.com.ampcuan123.lol-ssl_log
0 bytes
0640
kingasia.lol.ampcuan123.lol
0 bytes
0640
kingasia.lol.ampcuan123.lol-ssl_log
0 bytes
0640
kingblackgoat.registerspaces.com
0 bytes
0640
kingblackgoat.registerspaces.com-ssl_log
0 bytes
0640
kotakkejutan123.com.ampcuan123.lol
0 bytes
0640
kotakkejutan123.com.ampcuan123.lol-ssl_log
0 bytes
0640
laughincomedycafe-com.rumahwebspaces.com
0 bytes
0640
laughincomedycafe-com.rumahwebspaces.com-ssl_log
0 bytes
0640
layarkaca21xindoxxi.com.ampcuan123.lol
0 bytes
0640
layarkaca21xindoxxi.com.ampcuan123.lol-ssl_log
0 bytes
0640
lbf-virtual.com.ampcuan123.lol
0 bytes
0640
lbf-virtual.com.ampcuan123.lol-ssl_log
5616 bytes
0640
legalaxie.net.ampcuan123.lol
0 bytes
0640
legalaxie.net.ampcuan123.lol-ssl_log
0 bytes
0640
leighadams.com.ampcuan123.lol
0 bytes
0640
leighadams.com.ampcuan123.lol-ssl_log
0 bytes
0640
lethallacecom.ampcuan123.lol
219010 bytes
0640
lethallacecom.ampcuan123.lol-ssl_log
0 bytes
0640
loginamp.info.registerspaces.com
0 bytes
0640
loginamp.info.registerspaces.com-ssl_log
0 bytes
0640
loginamp123.dev.ampcuan123.lol
0 bytes
0640
loginamp123.dev.ampcuan123.lol-ssl_log
0 bytes
0640
logincuan123happy.info.ampcuan123.lol
0 bytes
0640
logincuan123happy.info.ampcuan123.lol-ssl_log
0 bytes
0640
loginmampir123.cc.ampcuan123.lol
0 bytes
0640
loginmampir123.cc.ampcuan123.lol-ssl_log
0 bytes
0640
loginsuper7.xyz.ampcuan123.lol
0 bytes
0640
louboutinshoessale.us.ampcuan123.lol
0 bytes
0640
louboutinshoessale.us.ampcuan123.lol-ssl_log
0 bytes
0640
lpmplampung.id.ampcuan123.lol
0 bytes
0640
lpmplampung.id.ampcuan123.lol-ssl_log
0 bytes
0640
luckywheels.live.ampcuan123.lol
0 bytes
0640
luckywheels.live.ampcuan123.lol-ssl_log
0 bytes
0640
ludkinsmedia.com.ampcuan123.lol
0 bytes
0640
ludkinsmedia.com.ampcuan123.lol-ssl_log
0 bytes
0640
luemaksiau.lol.ampcuan123.lol
0 bytes
0640
luemaksiau.lol.ampcuan123.lol-ssl_log
0 bytes
0640
lumenelectronicjewelry.com.ampcuan123.lol
34788 bytes
0640
lumenelectronicjewelry.com.ampcuan123.lol-ssl_log
173465036 bytes
0640
macramdirect.com.ampcuan123.lol
0 bytes
0640
macramdirect.com.ampcuan123.lol-ssl_log
7777469 bytes
0640
maderic.co.id.ampcuan123.lol
0 bytes
0640
maderic.co.id.ampcuan123.lol-ssl_log
0 bytes
0640
maindisiniaja.lol.ampcuan123.lol
0 bytes
0640
maindisiniaja.lol.ampcuan123.lol-ssl_log
0 bytes
0640
maken-kicom.ampcuan123.lol
0 bytes
0640
maken-kicom.ampcuan123.lol-ssl_log
0 bytes
0640
mampir123.registerspaces.com
0 bytes
0640
mampir123.registerspaces.com-ssl_log
0 bytes
0640
mampir123.rumahwebspaces.com
0 bytes
0640
mampir123.rumahwebspaces.com-ssl_log
0 bytes
0640
mampir123blue.registerspaces.com
0 bytes
0640
mampir123blue.registerspaces.com-ssl_log
0 bytes
0640
mari.masuksakti123.xyz
0 bytes
0640
mari.masuksakti123.xyz-ssl_log
0 bytes
0640
masuksakti123.xyz.ampcuan123.lol
0 bytes
0640
masuksakti123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
matomenewsxx.com.ampcuan123.lol
0 bytes
0640
matomenewsxx.com.ampcuan123.lol-ssl_log
0 bytes
0640
mbiufscar.super7seo.dev
0 bytes
0640
mbiufscar.super7seo.dev-ssl_log
0 bytes
0640
mohamionline.com.ampcuan123.lol
9996823 bytes
0640
mohamionline.com.ampcuan123.lol-ssl_log
0 bytes
0640
moscowbloom.com.ampcuan123.lol
2817 bytes
0640
moscowbloom.com.ampcuan123.lol-ssl_log
7807 bytes
0640
myclassiclyrics.com.ampcuan123.lol
0 bytes
0640
mycpohq.com.ampcuan123.lol
865456 bytes
0640
mycpohq.com.ampcuan123.lol-ssl_log
1291298 bytes
0640
nearinggracemovie.com.ampcuan123.lol
442136 bytes
0640
nearinggracemovie.com.ampcuan123.lol-ssl_log
5129896 bytes
0640
nguyencrt.autos.ampcuan123.lol
0 bytes
0640
nguyencrt.autos.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt.fun.ampcuan123.lol
0 bytes
0640
nguyencrt.homes.ampcuan123.lol
0 bytes
0640
nguyencrt.homes.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt.ink.ampcuan123.lol
0 bytes
0640
nguyencrt.ink.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt.live.ampcuan123.lol
0 bytes
0640
nguyencrt.live.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt.one.ampcuan123.lol
0 bytes
0640
nguyencrt.one.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt.online.ampcuan123.lol
0 bytes
0640
nguyencrt.pro.ampcuan123.lol
0 bytes
0640
nguyencrt.pro.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt.store.ampcuan123.lol
0 bytes
0640
nguyencrt.store.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt1.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt1.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt10.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt10.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt11.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt12.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt13.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt14.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt15.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt16.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt17.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt18.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt19.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt2.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt2.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt20.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt21.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt22.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt23.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt24.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt25.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt26.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt27.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt28.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt28.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt29.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt3.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt3.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt4.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt4.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt5.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt5.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt6.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt6.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt7.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt7.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt8.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt8.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nguyencrt9.xyz.ampcuan123.lol
0 bytes
0640
nguyencrt9.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
nusaland.com.ampcuan123.lol
0 bytes
0640
nusaland.com.ampcuan123.lol-ssl_log
0 bytes
0640
nvudev.com.ampcuan123.lol
0 bytes
0640
oceanjlk.com.ampcuan123.lol
40797 bytes
0640
oceanjlk.com.ampcuan123.lol-ssl_log
105020 bytes
0640
ompong188.registerspaces.com
0 bytes
0640
ompong188.registerspaces.com-ssl_log
0 bytes
0640
ompong188.rumahwebspaces.com
0 bytes
0640
ompong188.rumahwebspaces.com-ssl_log
0 bytes
0640
operationleakspinorg.ampcuan123.lol
0 bytes
0640
operationleakspinorg.ampcuan123.lol-ssl_log
0 bytes
0640
otpsuccsess.com.ampcuan123.lol
40361 bytes
0640
otpsuccsess.com.ampcuan123.lol-ssl_log
0 bytes
0640
pampered-dog-gifts.com.ampcuan123.lol
0 bytes
0640
pampered-dog-gifts.com.ampcuan123.lol-ssl_log
0 bytes
0640
pasar123.org.registerspaces.com
0 bytes
0640
pasar123.org.registerspaces.com-ssl_log
0 bytes
0640
pasar123.rumahwebspaces.com
0 bytes
0640
pasar123.rumahwebspaces.com-ssl_log
0 bytes
0640
pasar123akses.vip.ampcuan123.lol
0 bytes
0640
pasar123akses.vip.ampcuan123.lol-ssl_log
0 bytes
0640
pauliespizzeriasi.com.ampcuan123.lol
18274 bytes
0640
pauliespizzeriasi.com.ampcuan123.lol-ssl_log
0 bytes
0640
pekalongancheat.autos.ampcuan123.lol
0 bytes
0640
pekalongancheat.autos.ampcuan123.lol-ssl_log
0 bytes
0640
pekalongancheat.fun.ampcuan123.lol
0 bytes
0640
pekalongancheat.homes.ampcuan123.lol
0 bytes
0640
pekalongancheat.homes.ampcuan123.lol-ssl_log
0 bytes
0640
pekalongancheat.ink.ampcuan123.lol
0 bytes
0640
pekalongancheat.ink.ampcuan123.lol-ssl_log
0 bytes
0640
pekalongancheat.live.ampcuan123.lol
0 bytes
0640
pekalongancheat.live.ampcuan123.lol-ssl_log
0 bytes
0640
pekalongancheat.one.ampcuan123.lol
0 bytes
0640
pekalongancheat.one.ampcuan123.lol-ssl_log
0 bytes
0640
pekalongancheat.online.ampcuan123.lol
0 bytes
0640
pekalongancheat.site.ampcuan123.lol
0 bytes
0640
pekalongancheat.store.ampcuan123.lol
0 bytes
0640
pekalongancheat.xyz.ampcuan123.lol
0 bytes
0640
pekalongancheat.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
pgsoftbooster.vip.ampcuan123.lol
93976 bytes
0640
pgsoftbooster.vip.ampcuan123.lol-ssl_log
23750 bytes
0640
playground-magazine.com.ampcuan123.lol
0 bytes
0640
pornroi.com.ampcuan123.lol
1590 bytes
0640
pornroi.com.ampcuan123.lol-ssl_log
35411725 bytes
0640
productionscr.com.ampcuan123.lol
0 bytes
0640
productionscr.com.ampcuan123.lol-ssl_log
0 bytes
0640
r6-family.com.ampcuan123.lol
0 bytes
0640
r6-family.com.ampcuan123.lol-ssl_log
0 bytes
0640
raksasa123asik.com.ampcuan123.lol
0 bytes
0640
raksasa123asik.com.ampcuan123.lol-ssl_log
0 bytes
0640
raksasa123asli.com.ampcuan123.lol
0 bytes
0640
raksasa123asli.com.ampcuan123.lol-ssl_log
0 bytes
0640
raksasa123official.xyz.ampcuan123.lol
0 bytes
0640
raksasa123official.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
registerspaces.com.ampcuan123.lol
0 bytes
0640
registerspaces.com.ampcuan123.lol-ssl_log
0 bytes
0640
reliancerobopds.co.id.ampcuan123.lol
1272 bytes
0640
reliancerobopds.co.id.ampcuan123.lol-ssl_log
8050884 bytes
0640
robotjackpot.art.ampcuan123.lol
0 bytes
0640
robotjackpot.art.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.info.ampcuan123.lol
0 bytes
0640
robotjackpot.info.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.lat.ampcuan123.lol
0 bytes
0640
robotjackpot.lat.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.live.ampcuan123.lol
0 bytes
0640
robotjackpot.live.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.lol.ampcuan123.lol
0 bytes
0640
robotjackpot.lol.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.one.ampcuan123.lol
0 bytes
0640
robotjackpot.one.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.site.ampcuan123.lol
0 bytes
0640
robotjackpot.site.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.store.ampcuan123.lol
0 bytes
0640
robotjackpot.store.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.today.ampcuan123.lol
0 bytes
0640
robotjackpot.today.ampcuan123.lol-ssl_log
0 bytes
0640
robotjackpot.xyz.ampcuan123.lol
0 bytes
0640
robotjackpot.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
rpp-kputangsel.id.ampcuan123.lol
0 bytes
0640
rpp-kputangsel.id.ampcuan123.lol-ssl_log
0 bytes
0640
rumahwebspaces.com.ampcuan123.lol
0 bytes
0640
rumahwebspaces.com.ampcuan123.lol-ssl_log
0 bytes
0640
sadakoera.rumahwebspaces.com
0 bytes
0640
sadakoera.rumahwebspaces.com-ssl_log
0 bytes
0640
sakti123rtp-new.site.ampcuan123.lol
0 bytes
0640
sakti123rtp-new.site.ampcuan123.lol-ssl_log
0 bytes
0640
sdiptunasbangsabna.sch.id.ampcuan123.lol
1369129 bytes
0640
sdiptunasbangsabna.sch.id.ampcuan123.lol-ssl_log
4256437 bytes
0640
sensassure.com.ampcuan123.lol
282549 bytes
0640
sensassure.com.ampcuan123.lol-ssl_log
0 bytes
0640
seoblackgoat.xyz.ampcuan123.lol
0 bytes
0640
seoblackgoat.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
server.gameraksasa123.com
0 bytes
0640
servergacor123.click.ampcuan123.lol
0 bytes
0640
servergacor123.click.ampcuan123.lol-ssl_log
0 bytes
0640
servergacor123.info.ampcuan123.lol
0 bytes
0640
servergacor123.info.ampcuan123.lol-ssl_log
0 bytes
0640
servergacor123.live.ampcuan123.lol
0 bytes
0640
servergacor123.live.ampcuan123.lol-ssl_log
0 bytes
0640
servergacor123.online.ampcuan123.lol
0 bytes
0640
servergacor123.org.ampcuan123.lol
0 bytes
0640
servergacor123.org.ampcuan123.lol-ssl_log
0 bytes
0640
servergacor123.pro.ampcuan123.lol
0 bytes
0640
servergacor123.pro.ampcuan123.lol-ssl_log
0 bytes
0640
servergacor123.site.ampcuan123.lol
0 bytes
0640
servergacor123.store.ampcuan123.lol
0 bytes
0640
servergacor123.us.ampcuan123.lol
0 bytes
0640
servergacor123.us.ampcuan123.lol-ssl_log
0 bytes
0640
servergacor123.xyz.ampcuan123.lol
0 bytes
0640
servergacor123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
serverglobalkartel196.com.ampcuan123.lol
0 bytes
0640
serverglobalkartel196.com.ampcuan123.lol-ssl_log
0 bytes
0640
serverpremium.lol.ampcuan123.lol
0 bytes
0640
serverpremium.lol.ampcuan123.lol-ssl_log
0 bytes
0640
serverpremium.pro.ampcuan123.lol
0 bytes
0640
serverpremium.pro.ampcuan123.lol-ssl_log
0 bytes
0640
serverpremium.xyz.ampcuan123.lol
0 bytes
0640
serverpremium.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
serverprogacor123.click.ampcuan123.lol
0 bytes
0640
serverprogacor123.info.ampcuan123.lol
0 bytes
0640
serverprogacor123.info.ampcuan123.lol-ssl_log
0 bytes
0640
serverprogacor123.live.ampcuan123.lol
0 bytes
0640
serverprogacor123.live.ampcuan123.lol-ssl_log
0 bytes
0640
serverprogacor123.online.ampcuan123.lol
0 bytes
0640
serverprogacor123.site.ampcuan123.lol
0 bytes
0640
serverprogacor123.store.ampcuan123.lol
0 bytes
0640
serverprogacor123.us.ampcuan123.lol
0 bytes
0640
serverprogacor123.us.ampcuan123.lol-ssl_log
0 bytes
0640
serverprogacor123.xyz.ampcuan123.lol
0 bytes
0640
serverprogacor123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
severnaparkchamber.com.ampcuan123.lol
30610 bytes
0640
severnaparkchamber.com.ampcuan123.lol-ssl_log
1148202 bytes
0640
shanghai247net.ampcuan123.lol
0 bytes
0640
ship-ashore.com.ampcuan123.lol
0 bytes
0640
ship-ashore.com.ampcuan123.lol-ssl_log
0 bytes
0640
smanegeri2-sarolangun.sch.id.ampcuan123.lol
403872 bytes
0640
smanegeri2-sarolangun.sch.id.ampcuan123.lol-ssl_log
883583 bytes
0640
smpn10bpp.sch.id.ampcuan123.lol
100449 bytes
0640
smpn10bpp.sch.id.ampcuan123.lol-ssl_log
131237 bytes
0640
smpn11bpn.sch.id.ampcuan123.lol
4103617 bytes
0640
smpn11bpn.sch.id.ampcuan123.lol-ssl_log
4519828 bytes
0640
solarcellsuryacom.ampcuan123.lol
0 bytes
0640
solarcellsuryacom.ampcuan123.lol-ssl_log
0 bytes
0640
soundbydesign.org.ampcuan123.lol
0 bytes
0640
soundbydesign.org.ampcuan123.lol-ssl_log
0 bytes
0640
stagemamanet.ampcuan123.lol
0 bytes
0640
stagemamanet.ampcuan123.lol-ssl_log
0 bytes
0640
starmediamw.com.ampcuan123.lol
1590 bytes
0640
starmediamw.com.ampcuan123.lol-ssl_log
5288140 bytes
0640
starscafe.xyz.ampcuan123.lol
0 bytes
0640
sumatalpacte.com.ampcuan123.lol
0 bytes
0640
sumatalpacte.com.ampcuan123.lol-ssl_log
0 bytes
0640
sunnybankcollies.us.ampcuan123.lol
0 bytes
0640
sunnybankcollies.us.ampcuan123.lol-ssl_log
0 bytes
0640
super7amp.com.ampcuan123.lol
0 bytes
0640
super7amp.com.ampcuan123.lol-ssl_log
0 bytes
0640
super7amp.vip.ampcuan123.lol
62014 bytes
0640
super7amp.vip.ampcuan123.lol-ssl_log
320467 bytes
0640
super7botak.xyz.ampcuan123.lol
0 bytes
0640
super7botak.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
super7hot.registerspaces.com
0 bytes
0640
super7hot.registerspaces.com-ssl_log
0 bytes
0640
super7isback.registerspaces.com
0 bytes
0640
super7isback.registerspaces.com-ssl_log
0 bytes
0640
super7script.xyz.ampcuan123.lol
219944 bytes
0640
super7script.xyz.ampcuan123.lol-ssl_log
305195 bytes
0640
super7seo.dev.ampcuan123.lol
0 bytes
0640
super7seo.dev.ampcuan123.lol-ssl_log
0 bytes
0640
super7seo.site.ampcuan123.lol
0 bytes
0640
super7seo.site.ampcuan123.lol-ssl_log
0 bytes
0640
super7seo123.xyz.ampcuan123.lol
0 bytes
0640
super7seo123.xyz.ampcuan123.lol-ssl_log
0 bytes
0640
super7seo303.lol.ampcuan123.lol
0 bytes
0640
super7seo303.lol.ampcuan123.lol-ssl_log
0 bytes
0640
super7sukses.dev.ampcuan123.lol
0 bytes
0640
super7sukses.dev.ampcuan123.lol-ssl_log
0 bytes
0640
templehillel.com.ampcuan123.lol
348838 bytes
0640
templehillel.com.ampcuan123.lol-ssl_log
0 bytes
0640
tes.adminterpercaya.pro
23973 bytes
0640
tes.adminterpercaya.pro-ssl_log
25683 bytes
0640
theapronarchives.com.ampcuan123.lol
0 bytes
0640
theapronarchives.com.ampcuan123.lol-ssl_log
0 bytes
0640
thebakery.super7seo303.lol
0 bytes
0640
thebakery.super7seo303.lol-ssl_log
0 bytes
0640
thecelotajscom.ampcuan123.lol
0 bytes
0640
thecelotajscom.ampcuan123.lol-ssl_log
0 bytes
0640
thehampshirehog.com.ampcuan123.lol
0 bytes
0640
thelondontriathlon.com.ampcuan123.lol
0 bytes
0640
thepastahouse.org.ampcuan123.lol
0 bytes
0640
thepastahouse.org.ampcuan123.lol-ssl_log
0 bytes
0640
thewhimsicalbakehouse.com.ampcuan123.lol
56247 bytes
0640
thewhimsicalbakehouse.com.ampcuan123.lol-ssl_log
744 bytes
0640
thewhimsicalbakehouse.loginamp123.dev
0 bytes
0640
thewhimsicalbakehouse.loginamp123.dev-ssl_log
0 bytes
0640
tiffanyamberng.com.ampcuan123.lol
1043403 bytes
0640
tiffanyamberng.com.ampcuan123.lol-ssl_log
0 bytes
0640
tomswick.serverpremium.pro
0 bytes
0640
tomswick.serverpremium.pro-ssl_log
0 bytes
0640
topbesttoys.com.ampcuan123.lol
0 bytes
0640
topbesttoys.com.ampcuan123.lol-ssl_log
0 bytes
0640
upfromflames.com.ampcuan123.lol
0 bytes
0640
upfromflames.com.ampcuan123.lol-ssl_log
0 bytes
0640
upholsterystore-ny.com.ampcuan123.lol
0 bytes
0640
upholsterystore-ny.com.ampcuan123.lol-ssl_log
0 bytes
0640
uploadimagenscom.ampcuan123.lol
0 bytes
0640
uploadimagenscom.ampcuan123.lol-ssl_log
0 bytes
0640
useallmymind.com.ampcuan123.lol
48541 bytes
0640
useallmymind.com.ampcuan123.lol-ssl_log
0 bytes
0640
used.cheatengine01.fun
0 bytes
0640
visitseasia.travel.ampcuan123.lol
0 bytes
0640
visitseasia.travel.ampcuan123.lol-ssl_log
0 bytes
0640
vtwctr.org.ampcuan123.lol
0 bytes
0640
vtwctr.org.ampcuan123.lol-ssl_log
0 bytes
0640
waldron3d.com.ampcuan123.lol
0 bytes
0640
waldron3d.com.ampcuan123.lol-ssl_log
0 bytes
0640
wheninromebigfork.com.ampcuan123.lol
342849 bytes
0640
wheninromebigfork.com.ampcuan123.lol-ssl_log
129947437 bytes
0640
wildgender-com.rumahwebspaces.com
0 bytes
0640
wildgender-com.rumahwebspaces.com-ssl_log
0 bytes
0640
wm-commonsatwhitemarsh.com.ampcuan123.lol
67730 bytes
0640
wm-commonsatwhitemarsh.com.ampcuan123.lol-ssl_log
5913998 bytes
0640
wondershareh.com.ampcuan123.lol
57599 bytes
0640
wondershareh.com.ampcuan123.lol-ssl_log
0 bytes
0640
xr8d.net.ampcuan123.lol
45101 bytes
0640
xr8d.net.ampcuan123.lol-ssl_log
0 bytes
0640
yeezy-supply.com.ampcuan123.lol
87095 bytes
0640
yeezy-supply.com.ampcuan123.lol-ssl_log
535996 bytes
0640
youngonesapparelcom.ampcuan123.lol
0 bytes
0640
youngonesapparelcom.ampcuan123.lol-ssl_log
0 bytes
0640
yuki138-pucatkawan.com.ampcuan123.lol
40319 bytes
0640
yuki138-pucatkawan.com.ampcuan123.lol-ssl_log
26639132 bytes
0640
yuki138.io.ampcuan123.lol
190912 bytes
0640
yuki138.io.ampcuan123.lol-ssl_log
40684 bytes
0640
yuki138.it.com.ampcuan123.lol
183459 bytes
0640
yuki138.it.com.ampcuan123.lol-ssl_log
27702698 bytes
0640
N4ST4R_ID | Naxtarrr
