216.244.66.243 - - [19/Oct/2025:08:23:15 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
40.86.92.94 - - [19/Oct/2025:09:07:05 -0400] "GET /.__info.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:06 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:06 -0400] "GET /07.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:07 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:07 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:08 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:08 -0400] "GET /abcd.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:09 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:09 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:10 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:10 -0400] "GET /akc.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:11 -0400] "GET /akcc.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:11 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:12 -0400] "GET /asd.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:12 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:13 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:13 -0400] "GET /axx.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:14 -0400] "GET /berax.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:14 -0400] "GET /build.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:15 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:15 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:16 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:16 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:16 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:17 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:17 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:18 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:18 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:19 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:19 -0400] "GET /f5.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:20 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:20 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:21 -0400] "GET /file4.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:21 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:22 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:22 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:23 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:23 -0400] "GET /god4m.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:24 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:24 -0400] "GET /kyami.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:25 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:25 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:26 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:26 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:27 -0400] "GET /nc4.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:27 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:28 -0400] "GET /sallu.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:28 -0400] "GET /test1.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:29 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:29 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:30 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:30 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:30 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-"
40.86.92.94 - - [19/Oct/2025:09:07:31 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-"
43.157.148.38 - - [19/Oct/2025:09:18:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
49.51.233.46 - - [19/Oct/2025:09:55:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
173.252.95.14 - - [19/Oct/2025:10:11:48 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
89.248.172.183 - - [19/Oct/2025:10:16:22 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
89.248.172.183 - - [19/Oct/2025:10:29:53 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
223.244.35.77 - - [19/Oct/2025:10:31:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
139.59.85.218 - - [19/Oct/2025:11:46:21 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:46:28 -0400] "GET /wp-content/uploads/2025/10/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:46:39 -0400] "GET /wp-content/uploads/2025/09/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:46:45 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:46:51 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:46:59 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:47:08 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:47:18 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:47:28 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:47:38 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:47:47 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:47:56 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:48:07 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
94.152.206.79 - - [19/Oct/2025:11:48:11 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0"
139.59.85.218 - - [19/Oct/2025:11:48:20 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:48:30 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:48:39 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:48:49 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:48:58 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:49:07 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:49:19 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:49:27 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:49:34 -0400] "GET /wp-admin/css/colors/sunrise/%20 HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:49:43 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:49:51 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:00 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:08 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:17 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:24 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:30 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:37 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:44 -0400] "GET /wp-includes/block-template.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:51 -0400] "GET /wp-includes/class-avif-info.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:50:57 -0400] "GET /wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:51:04 -0400] "GET /wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:51:13 -0400] "GET /wp-includes/class-wp-block-editor-context.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:51:22 -0400] "GET /wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:51:31 -0400] "GET /wp-includes/class-wp-block-parser-block.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:51:37 -0400] "GET /wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:51:46 -0400] "GET /wp-includes/class-wp-block-template.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:51:54 -0400] "GET /wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:03 -0400] "GET /wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:09 -0400] "GET /wp-includes/class-wp-dependencies.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:19 -0400] "GET /wp-includes/class-wp-duotone.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:28 -0400] "GET /wp-includes/class-wp-exception.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:36 -0400] "GET /wp-includes/class-wp-http.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:43 -0400] "GET /wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:51 -0400] "GET /wp-includes/class-wp-phpmailer.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:52:59 -0400] "GET /wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:53:07 -0400] "GET /wp-includes/class-wp-script-modules.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:53:24 -0400] "GET /wp-includes/class-wp-scripts.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:53:34 -0400] "GET /wp-includes/class-wp-speculation-rules.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:53:45 -0400] "GET /wp-includes/class-wp-styles.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:53:56 -0400] "GET /wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:54:06 -0400] "GET /wp-includes/class-wp-theme-json-data.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:54:16 -0400] "GET /wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:54:21 -0400] "GET /wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:54:29 -0400] "GET /wp-includes/class-wp-theme-json.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:54:40 -0400] "GET /wp-includes/class-wp-token-map.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:54:51 -0400] "GET /wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:00 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:10 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:17 -0400] "GET /wp-includes/global-styles-and-settings.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:24 -0400] "GET /wp-includes/https-detection.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:32 -0400] "GET /wp-includes/https-migration.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:40 -0400] "GET /wp-includes/robots-template.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:49 -0400] "GET /wp-includes/script-modules.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:55:57 -0400] "GET /wp-includes/speculative-loading.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:56:08 -0400] "GET /wp-includes/style-engine.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:56:15 -0400] "GET /wp-includes/template-canvas.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:56:27 -0400] "GET /wp-includes/theme-previews.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:56:37 -0400] "GET /wp-includes/theme-statement.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:56:44 -0400] "GET /wp-includes/theme-templates.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:56:49 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:56:56 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:57:06 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:57:15 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:57:37 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:57:48 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:57:58 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:58:05 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:58:12 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:58:19 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:58:35 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:58:45 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:58:55 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:59:01 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:59:12 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:59:21 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:59:31 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:59:41 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:59:50 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:11:59:58 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:06 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:11 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:16 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:24 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:31 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:39 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:48 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:00:55 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:01:07 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:01:15 -0400] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:01:23 -0400] "GET /wp-includes/fonts/class-wp-font-face.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:01:34 -0400] "GET /wp-includes/fonts/class-wp-font-library.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:01:48 -0400] "GET /wp-includes/fonts/class-wp-font-utils.php HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:01:59 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:02:13 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:02:23 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:02:35 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:02:42 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:02:51 -0400] "GET /wp-includes/js/%20 HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:03:00 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:03:14 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.85.218 - - [19/Oct/2025:12:03:25 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
216.244.66.243 - - [19/Oct/2025:12:15:24 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
86.97.163.66 - - [19/Oct/2025:12:18:47 -0400] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
66.249.65.194 - - [19/Oct/2025:12:22:21 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
43.173.177.198 - - [19/Oct/2025:12:26:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.114 Safari/537.36"
89.248.172.183 - - [19/Oct/2025:13:14:34 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
165.22.11.41 - - [19/Oct/2025:14:33:03 -0400] "GET /?fileloc=/home/creaqbdc/public_html/license.txt&path=/home/creaqbdc/public_html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
54.90.218.24 - - [19/Oct/2025:14:44:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
89.248.172.183 - - [19/Oct/2025:14:52:59 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
195.26.30.42 - - [19/Oct/2025:15:02:39 -0400] "GET /wp-content/plugins/litespeed-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
147.182.183.173 - - [19/Oct/2025:15:11:07 -0400] "GET /?fileloc=/home/creaqbdc/public_html/robots.txt&path=/home/creaqbdc/public_html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
167.71.22.59 - - [19/Oct/2025:15:21:46 -0400] "GET /?fileloc=/home/creaqbdc/public_html/license.txt&path=/home/creaqbdc/public_html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
204.48.28.167 - - [19/Oct/2025:15:56:22 -0400] "GET /?fileloc=/home/creaqbdc/public_html/license.txt&path=/home/creaqbdc/public_html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
119.18.149.106 - - [19/Oct/2025:15:56:27 -0400] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
182.42.111.213 - - [19/Oct/2025:16:26:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
134.199.174.194 - - [19/Oct/2025:16:48:03 -0400] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
95.31.7.19 - - [19/Oct/2025:17:14:57 -0400] "GET /wp-content/plugins/backup-backup/modules/gdrivebanner/assets/css/styles.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
8.152.192.95 - - [19/Oct/2025:17:17:41 -0400] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
185.159.82.149 - - [19/Oct/2025:17:34:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0"
212.34.141.109 - - [19/Oct/2025:17:41:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
43.173.180.196 - - [19/Oct/2025:18:17:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
89.248.172.183 - - [19/Oct/2025:19:20:25 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
13.79.87.25 - - [19/Oct/2025:20:01:09 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-"
13.79.87.25 - - [19/Oct/2025:20:01:10 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-"
89.248.172.183 - - [19/Oct/2025:20:41:43 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
89.248.172.183 - - [19/Oct/2025:21:26:08 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
103.177.124.24 - - [19/Oct/2025:21:38:42 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.0.0"
182.42.111.156 - - [19/Oct/2025:22:21:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
185.39.19.49 - - [19/Oct/2025:22:23:46 -0400] "GET / HTTP/1.0" 301 795 "http://creativefinishings.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
89.248.172.183 - - [19/Oct/2025:23:18:39 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
206.189.205.214 - - [19/Oct/2025:23:19:49 -0400] "GET /?fileloc=/home/creaqbdc/public_html/robots.txt&path=/home/creaqbdc/public_html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
89.248.172.183 - - [19/Oct/2025:23:23:19 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
2.58.56.112 - - [20/Oct/2025:00:00:39 -0400] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
43.167.236.228 - - [20/Oct/2025:00:04:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
137.184.158.143 - - [20/Oct/2025:00:11:07 -0400] "GET /?fileloc=/home/creaqbdc/public_html/license.txt&path=/home/creaqbdc/public_html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
191.96.146.146 - - [20/Oct/2025:00:14:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
43.173.175.253 - - [20/Oct/2025:00:24:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.114 Safari/537.36"
43.166.132.142 - - [20/Oct/2025:00:48:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
89.248.172.183 - - [20/Oct/2025:01:11:54 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
212.34.155.126 - - [20/Oct/2025:01:30:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
89.248.172.183 - - [20/Oct/2025:01:48:09 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
89.248.172.183 - - [20/Oct/2025:01:55:08 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
89.248.172.183 - - [20/Oct/2025:02:22:06 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
193.168.179.19 - - [20/Oct/2025:02:37:18 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15"
89.248.172.183 - - [20/Oct/2025:02:51:08 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"
103.77.106.41 - - [20/Oct/2025:03:08:12 -0400] "GET /.tmb/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:12 -0400] "GET /?loadme HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:12 -0400] "GET /ow1xx1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:12 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:12 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.199 - - [20/Oct/2025:03:08:32 -0400] "GET /.tmb/wso.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.251 - - [20/Oct/2025:03:08:42 -0400] "GET /?loadme HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.249 - - [20/Oct/2025:03:08:43 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.205 - - [20/Oct/2025:03:08:53 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.244 - - [20/Oct/2025:03:08:54 -0400] "GET /ow1xx1.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:08:59 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:59 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:59 -0400] "GET /.well-known/gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:59 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:08:59 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.253 - - [20/Oct/2025:03:09:13 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.205 - - [20/Oct/2025:03:09:13 -0400] "GET /.well-known/gelay.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.253 - - [20/Oct/2025:03:09:14 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.204 - - [20/Oct/2025:03:09:15 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:03:09:16 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:09:37 -0400] "GET /.well-known/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:09:37 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:09:37 -0400] "GET /.well-knownold/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:09:37 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:09:37 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.212 - - [20/Oct/2025:03:09:55 -0400] "GET /.well-known/wp-signup.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.219 - - [20/Oct/2025:03:10:08 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:03:10:19 -0400] "GET /.well-knownold/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:10:29 -0400] "GET /wp-old.pHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:10:29 -0400] "GET /wp-coments-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:10:29 -0400] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:10:29 -0400] "GET /tot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:10:29 -0400] "GET /content-who.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.251 - - [20/Oct/2025:03:10:41 -0400] "GET /tot.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:10:52 -0400] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:11:00 -0400] "GET /wp-coments-post.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.216 - - [20/Oct/2025:03:11:02 -0400] "GET /content-who.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:11:02 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:02 -0400] "GET /wp-loads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:02 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:02 -0400] "GET /gbb3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:02 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.221 - - [20/Oct/2025:03:11:12 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.199 - - [20/Oct/2025:03:11:13 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:03:11:24 -0400] "GET /wp-loads.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:11:29 -0400] "GET /list.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:29 -0400] "GET /RaijuBypassnew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:29 -0400] "GET /course_commu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:29 -0400] "GET /conn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:11:29 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.237 - - [20/Oct/2025:03:11:43 -0400] "GET /RaijuBypassnew.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.246 - - [20/Oct/2025:03:11:44 -0400] "GET /course_commu.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.249 - - [20/Oct/2025:03:11:45 -0400] "GET /conn.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:03:11:55 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.199 - - [20/Oct/2025:03:11:55 -0400] "GET /list.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:12:03 -0400] "GET /777root.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:03 -0400] "GET /345454.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:03 -0400] "GET /jga.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:03 -0400] "GET /filecmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:03 -0400] "GET /blockedits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.235 - - [20/Oct/2025:03:12:26 -0400] "GET /777root.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:12:37 -0400] "GET /filecmd.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.249 - - [20/Oct/2025:03:12:47 -0400] "GET /blockedits.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.246 - - [20/Oct/2025:03:12:56 -0400] "GET /345454.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.249 - - [20/Oct/2025:03:12:56 -0400] "GET /jga.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:12:57 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:57 -0400] "GET /cache1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:57 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:57 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:12:57 -0400] "GET /00.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.214 - - [20/Oct/2025:03:13:08 -0400] "GET /cache1337.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.196 - - [20/Oct/2025:03:13:09 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.253 - - [20/Oct/2025:03:13:18 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:03:13:20 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.198 - - [20/Oct/2025:03:13:31 -0400] "GET /00.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:13:38 -0400] "GET /footer-hide.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:13:38 -0400] "GET /wp-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:13:38 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:13:38 -0400] "GET /mango.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:13:38 -0400] "GET /minibnn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.204 - - [20/Oct/2025:03:14:01 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.253 - - [20/Oct/2025:03:14:02 -0400] "GET /footer-hide.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.250 - - [20/Oct/2025:03:14:13 -0400] "GET /minibnn.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.251 - - [20/Oct/2025:03:14:14 -0400] "GET /mango.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.196 - - [20/Oct/2025:03:14:23 -0400] "GET /wp-request.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:14:23 -0400] "GET /x144xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:23 -0400] "GET /ws1w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:23 -0400] "GET /mod_ariimageslidersa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:23 -0400] "GET /1dfa311e3f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:23 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.200 - - [20/Oct/2025:03:14:44 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.198 - - [20/Oct/2025:03:14:45 -0400] "GET /x144xx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:03:14:46 -0400] "GET /mod_ariimageslidersa.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:14:55 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:55 -0400] "GET /newside.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:55 -0400] "GET /1212.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:55 -0400] "GET /345.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:14:55 -0400] "GET /gile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.219 - - [20/Oct/2025:03:15:24 -0400] "GET /newside.jsp HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:15:25 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.233 - - [20/Oct/2025:03:15:26 -0400] "GET /gile.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:03:15:27 -0400] "GET /1212.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.202 - - [20/Oct/2025:03:15:36 -0400] "GET /345.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:15:36 -0400] "GET /kurt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:15:36 -0400] "GET /course_commu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:15:36 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:15:36 -0400] "GET /clases-virtueles136.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:15:36 -0400] "GET /conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.218 - - [20/Oct/2025:03:16:07 -0400] "GET /kurt.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:16:18 -0400] "GET /clases-virtueles136.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:03:16:19 -0400] "GET /conflg.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.218 - - [20/Oct/2025:03:16:20 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:16:29 -0400] "GET /list.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:16:29 -0400] "GET /RaijuBypassnew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:16:29 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:16:29 -0400] "GET /conn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:17:22 -0400] "GET /wp-old.pHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:17:22 -0400] "GET /blockedits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:17:22 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:17:22 -0400] "GET /filecmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:17:22 -0400] "GET /345454.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.201 - - [20/Oct/2025:03:18:08 -0400] "GET /wp-old.pHP HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:18:29 -0400] "GET /nov.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:18:29 -0400] "GET /gbb3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:18:29 -0400] "GET /sep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:18:29 -0400] "GET /Class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:18:29 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.231 - - [20/Oct/2025:03:19:00 -0400] "GET /nov.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:03:19:00 -0400] "GET /Class.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.251 - - [20/Oct/2025:03:19:01 -0400] "GET /sep.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:03:19:02 -0400] "GET /gbb3.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:03:19:11 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:19:18 -0400] "GET /cmd1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:18 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:18 -0400] "GET /cmd2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:18 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:18 -0400] "GET /cha.phpw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.196 - - [20/Oct/2025:03:19:34 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.213 - - [20/Oct/2025:03:19:35 -0400] "GET /cmd2.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:19:43 -0400] "GET /cmd1.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:19:45 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.200 - - [20/Oct/2025:03:19:45 -0400] "GET /cha.phpw HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:19:51 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:51 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:51 -0400] "GET /00.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:51 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:19:51 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.235 - - [20/Oct/2025:03:20:02 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:20:03 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:03:20:04 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:03:20:05 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:20:15 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:15 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:15 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:15 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:15 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
165.22.213.207 - - [20/Oct/2025:03:20:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
165.22.213.207 - - [20/Oct/2025:03:20:32 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "http://creativefinishings.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
149.154.161.230 - - [20/Oct/2025:03:20:47 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:20:47 -0400] "GET /500.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:47 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:47 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:47 -0400] "GET /406.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:20:47 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.252 - - [20/Oct/2025:03:21:07 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.251 - - [20/Oct/2025:03:21:18 -0400] "GET /500.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:21:20 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.244 - - [20/Oct/2025:03:21:29 -0400] "GET /406.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:21:39 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:21:39 -0400] "GET /666.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:21:39 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:21:39 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:21:39 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.237 - - [20/Oct/2025:03:22:09 -0400] "GET /666.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:03:22:12 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.213 - - [20/Oct/2025:03:22:12 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.197 - - [20/Oct/2025:03:22:22 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:03:22:22 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:22:23 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:28 -0400] "GET /abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:28 -0400] "GET /a1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:28 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:28 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.220 - - [20/Oct/2025:03:22:30 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.217 - - [20/Oct/2025:03:22:44 -0400] "GET /abc.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.216 - - [20/Oct/2025:03:22:44 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.214 - - [20/Oct/2025:03:22:53 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.203 - - [20/Oct/2025:03:22:54 -0400] "GET /a1.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:22:55 -0400] "GET /administrator.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:55 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:55 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:55 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:22:55 -0400] "GET /alf4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.230 - - [20/Oct/2025:03:23:02 -0400] "GET /administrator.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:23:04 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:03:23:05 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:03:23:05 -0400] "GET /alf4.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.198 - - [20/Oct/2025:03:23:12 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:23:15 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:15 -0400] "GET /anon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:15 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:15 -0400] "GET /alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:15 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.251 - - [20/Oct/2025:03:23:36 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.197 - - [20/Oct/2025:03:23:45 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.199 - - [20/Oct/2025:03:23:46 -0400] "GET /alpha.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.246 - - [20/Oct/2025:03:23:55 -0400] "GET /anon.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:23:56 -0400] "GET /anonsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:56 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:56 -0400] "GET /anons79.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:56 -0400] "GET /assets/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:23:56 -0400] "GET /asd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.235 - - [20/Oct/2025:03:23:56 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:03:24:20 -0400] "GET /assets/css/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.196 - - [20/Oct/2025:03:24:29 -0400] "GET /anons79.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:24:30 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:35 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:35 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:35 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:35 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.212 - - [20/Oct/2025:03:24:38 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:03:24:40 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.233 - - [20/Oct/2025:03:24:49 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.205 - - [20/Oct/2025:03:24:50 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.214 - - [20/Oct/2025:03:24:51 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:24:57 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:57 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:57 -0400] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:57 -0400] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:24:57 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.200 - - [20/Oct/2025:03:25:32 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:25:33 -0400] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.212 - - [20/Oct/2025:03:25:45 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.252 - - [20/Oct/2025:03:25:55 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.203 - - [20/Oct/2025:03:26:04 -0400] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:26:06 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:26:06 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:26:06 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:26:06 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:26:06 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.234 - - [20/Oct/2025:03:26:15 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:03:26:16 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.217 - - [20/Oct/2025:03:26:24 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.218 - - [20/Oct/2025:03:26:32 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:26:34 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:26:34 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:26:34 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:26:34 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.203 - - [20/Oct/2025:03:26:48 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.251 - - [20/Oct/2025:03:26:57 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:03:27:18 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:28:10 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:28:10 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:28:10 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:28:10 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:28:10 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.218 - - [20/Oct/2025:03:28:55 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:29:06 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:06 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:06 -0400] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:06 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:06 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.197 - - [20/Oct/2025:03:29:15 -0400] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:03:29:16 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:03:29:16 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:29:36 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:36 -0400] "GET /wp-content/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:36 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:36 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:29:36 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.246 - - [20/Oct/2025:03:30:10 -0400] "GET /wp-content/IXR/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.218 - - [20/Oct/2025:03:30:21 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:30:54 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:30:54 -0400] "GET /bypas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:30:54 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:30:54 -0400] "GET /byp7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:30:54 -0400] "GET /byp403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.200 - - [20/Oct/2025:03:31:27 -0400] "GET /byp403.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.213 - - [20/Oct/2025:03:31:37 -0400] "GET /bypas.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:03:31:38 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.200 - - [20/Oct/2025:03:31:47 -0400] "GET /byp7.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:03:31:48 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:32:15 -0400] "GET /cgi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:32:15 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:32:15 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:32:15 -0400] "GET /byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:32:15 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.235 - - [20/Oct/2025:03:32:49 -0400] "GET /cgi.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.200 - - [20/Oct/2025:03:32:51 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:03:32:53 -0400] "GET /byps.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:33:04 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:33:18 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:33:18 -0400] "GET /con.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:33:18 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:33:18 -0400] "GET /compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:33:18 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.202 - - [20/Oct/2025:03:33:44 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.216 - - [20/Oct/2025:03:33:54 -0400] "GET /con.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.217 - - [20/Oct/2025:03:33:55 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.200 - - [20/Oct/2025:03:33:56 -0400] "GET /compat.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:34:06 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:06 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:06 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:06 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:06 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.233 - - [20/Oct/2025:03:34:28 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:03:34:38 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:03:34:38 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.214 - - [20/Oct/2025:03:34:49 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:34:49 -0400] "GET /dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:49 -0400] "GET /docindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:49 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:49 -0400] "GET /db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:34:49 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:10 -0400] "GET /exploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:10 -0400] "GET /error.php?phpshells HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:10 -0400] "GET /eagle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:10 -0400] "GET /evil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:10 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:42 -0400] "GET /fg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:42 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:42 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:42 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:35:42 -0400] "GET /fierza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.221 - - [20/Oct/2025:03:35:54 -0400] "GET /fg.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:36:03 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:03 -0400] "GET /foxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:03 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:03 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:03 -0400] "GET /flame.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.235 - - [20/Oct/2025:03:36:16 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:36:25 -0400] "GET /foxx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:36:25 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:36:36 -0400] "GET /flame.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:03:36:37 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:36:55 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:55 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:55 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:55 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:36:55 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.244 - - [20/Oct/2025:03:37:28 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:03:37:30 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.204 - - [20/Oct/2025:03:37:39 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:37:41 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:03:37:51 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:37:57 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:37:57 -0400] "GET /green.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:37:57 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:37:57 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:37:57 -0400] "GET /gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.219 - - [20/Oct/2025:03:38:12 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.236 - - [20/Oct/2025:03:38:13 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.234 - - [20/Oct/2025:03:38:22 -0400] "GET /gelay.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.251 - - [20/Oct/2025:03:38:23 -0400] "GET /green.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:38:24 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:38:33 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:38:33 -0400] "GET /id.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:38:33 -0400] "GET /idx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:38:33 -0400] "GET /hi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:38:33 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.245 - - [20/Oct/2025:03:39:04 -0400] "GET /idx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:39:05 -0400] "GET /id.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.230 - - [20/Oct/2025:03:39:17 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:03:39:18 -0400] "GET /hi.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.218 - - [20/Oct/2025:03:39:27 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:39:39 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:39:39 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:39:39 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:39:39 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:39:39 -0400] "GET /images/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:23 -0400] "GET /iq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:23 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:23 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:23 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:23 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.202 - - [20/Oct/2025:03:40:44 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:40:44 -0400] "GET /js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:44 -0400] "GET /js.php?get HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:44 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:44 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:40:44 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.197 - - [20/Oct/2025:03:41:05 -0400] "GET /js.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.233 - - [20/Oct/2025:03:41:27 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:41:28 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:42:01 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:01 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:01 -0400] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:01 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:01 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.197 - - [20/Oct/2025:03:42:08 -0400] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:03:42:21 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:42:59 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:59 -0400] "GET /local.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:59 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:59 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:42:59 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.200 - - [20/Oct/2025:03:43:32 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:43:33 -0400] "GET /local.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.197 - - [20/Oct/2025:03:43:34 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.217 - - [20/Oct/2025:03:43:35 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:03:43:36 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:43:54 -0400] "GET /mad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:43:54 -0400] "GET /lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:43:54 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:43:54 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:43:54 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.215 - - [20/Oct/2025:03:44:05 -0400] "GET /mad.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.202 - - [20/Oct/2025:03:44:18 -0400] "GET /lx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.198 - - [20/Oct/2025:03:44:38 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.250 - - [20/Oct/2025:03:44:38 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:44:39 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:45:20 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:45:20 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:45:20 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:45:20 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:45:20 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.244 - - [20/Oct/2025:03:45:55 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.244 - - [20/Oct/2025:03:46:03 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.199 - - [20/Oct/2025:03:46:04 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.212 - - [20/Oct/2025:03:46:05 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.202 - - [20/Oct/2025:03:46:13 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:46:34 -0400] "GET /mas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:46:34 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:46:34 -0400] "GET /min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:46:34 -0400] "GET /mass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:46:34 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.244 - - [20/Oct/2025:03:47:19 -0400] "GET /mas.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:03:47:30 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:03:47:32 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.213 - - [20/Oct/2025:03:47:40 -0400] "GET /min.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.253 - - [20/Oct/2025:03:47:43 -0400] "GET /mass.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:47:51 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:47:51 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:47:51 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:47:51 -0400] "GET /minishell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:47:51 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.200 - - [20/Oct/2025:03:48:46 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.214 - - [20/Oct/2025:03:49:07 -0400] "GET /minishell.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.214 - - [20/Oct/2025:03:49:08 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.253 - - [20/Oct/2025:03:49:16 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:03:49:17 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:49:18 -0400] "GET /ninja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:18 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:18 -0400] "GET /nn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:18 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:18 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.249 - - [20/Oct/2025:03:49:27 -0400] "GET /ninja.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:49:28 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.199 - - [20/Oct/2025:03:49:35 -0400] "GET /nn.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.244 - - [20/Oct/2025:03:49:57 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.233 - - [20/Oct/2025:03:49:58 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:49:59 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:59 -0400] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:59 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:59 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:49:59 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.245 - - [20/Oct/2025:03:50:22 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.204 - - [20/Oct/2025:03:50:32 -0400] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:03:50:53 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:03:51:03 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:03:51:34 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:51:35 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:51:35 -0400] "GET /r00t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:51:35 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:51:35 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:51:35 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.214 - - [20/Oct/2025:03:52:32 -0400] "GET /r00t.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:03:52:42 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.252 - - [20/Oct/2025:03:52:50 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.212 - - [20/Oct/2025:03:52:52 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.199 - - [20/Oct/2025:03:52:53 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:53:13 -0400] "GET /raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:53:13 -0400] "GET /radio.php?pass=shell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:53:13 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:53:13 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:53:13 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.251 - - [20/Oct/2025:03:54:19 -0400] "GET /radio.php?pass=shell HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.218 - - [20/Oct/2025:03:54:21 -0400] "GET /raw.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:03:54:31 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:03:54:41 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.214 - - [20/Oct/2025:03:54:41 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:54:58 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:54:58 -0400] "GET /seo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:54:58 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:54:58 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:54:58 -0400] "GET /shl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.212 - - [20/Oct/2025:03:55:40 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:55:42 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.234 - - [20/Oct/2025:03:55:43 -0400] "GET /seo.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:03:55:45 -0400] "GET /shl.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:03:55:51 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:55:54 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:55:54 -0400] "GET /Sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:55:54 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:55:54 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:55:54 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.250 - - [20/Oct/2025:03:56:50 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.244 - - [20/Oct/2025:03:56:59 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:03:57:00 -0400] "GET /Sym.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.250 - - [20/Oct/2025:03:57:01 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:57:23 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:57:23 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:57:28 -0400] "GET /tes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:57:28 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:57:28 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.220 - - [20/Oct/2025:03:57:53 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.252 - - [20/Oct/2025:03:57:54 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.246 - - [20/Oct/2025:03:58:27 -0400] "GET /tes.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.245 - - [20/Oct/2025:03:58:28 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.196 - - [20/Oct/2025:03:58:49 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:03:58:55 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:58:55 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:58:55 -0400] "GET /unknown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:58:55 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:03:58:55 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.251 - - [20/Oct/2025:03:59:21 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:03:59:22 -0400] "GET /unknown.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.251 - - [20/Oct/2025:03:59:33 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.246 - - [20/Oct/2025:03:59:54 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.203 - - [20/Oct/2025:04:00:04 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:00:16 -0400] "GET /uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:00:16 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:00:16 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:00:16 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:00:16 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:01:43 -0400] "GET /wp_cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:01:43 -0400] "GET /usr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:01:43 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:01:43 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:01:43 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.202 - - [20/Oct/2025:04:02:16 -0400] "GET /wp_cron.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.218 - - [20/Oct/2025:04:02:17 -0400] "GET /usr.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.214 - - [20/Oct/2025:04:02:47 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.250 - - [20/Oct/2025:04:02:48 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:04:02:58 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:03:08 -0400] "GET /wp-about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:03:08 -0400] "GET /wp-access.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:03:08 -0400] "GET /wp-.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:03:08 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:03:08 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.213 - - [20/Oct/2025:04:04:14 -0400] "GET /wp-.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.205 - - [20/Oct/2025:04:04:15 -0400] "GET /wp-about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.249 - - [20/Oct/2025:04:04:15 -0400] "GET /wp-access.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.233 - - [20/Oct/2025:04:04:27 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:04:58 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:04:58 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:04:58 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:04:58 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:04:58 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:05:36 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:05:36 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:05:36 -0400] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:05:36 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:05:36 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:06:58 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:06:58 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:06:58 -0400] "GET /wp-admin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:06:58 -0400] "GET /wp-admin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:06:58 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:07:58 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:07:58 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:07:58 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:07:58 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:07:58 -0400] "GET /wp-admin/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:09:28 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:09:28 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:09:28 -0400] "GET /wp-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:09:28 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:09:28 -0400] "GET /wp-conctent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.237 - - [20/Oct/2025:04:09:40 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.202 - - [20/Oct/2025:04:10:35 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:04:10:44 -0400] "GET /wp-conctent.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:11:07 -0400] "GET /wp-content/flame.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:11:07 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:11:07 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:11:07 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:11:07 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.248 - - [20/Oct/2025:04:12:24 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.196 - - [20/Oct/2025:04:12:32 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:12:32 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:12:32 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:12:32 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:12:32 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:12:32 -0400] "GET /wp-content/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.212 - - [20/Oct/2025:04:12:55 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:04:12:55 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.203 - - [20/Oct/2025:04:13:17 -0400] "GET /wp-content/inputs.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:04:13:18 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:13:38 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:13:38 -0400] "GET /wp-content/plugins/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:13:38 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:13:38 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:13:38 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.213 - - [20/Oct/2025:04:14:34 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.198 - - [20/Oct/2025:04:14:45 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:04:14:51 -0400] "GET /wp-content/plugins/inputs.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:04:14:52 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.244 - - [20/Oct/2025:04:14:53 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:15:05 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:05 -0400] "GET /wp-content/themes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:05 -0400] "GET /wp-content/uploads/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:05 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:05 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:59 -0400] "GET /wp-defaul.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:59 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:59 -0400] "GET /wp-includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:59 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:15:59 -0400] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.221 - - [20/Oct/2025:04:16:09 -0400] "GET /wp-defaul.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:16:31 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:16:31 -0400] "GET /wp-includes/assets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:16:31 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:16:31 -0400] "GET /wp-includes/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:16:31 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.218 - - [20/Oct/2025:04:17:25 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.217 - - [20/Oct/2025:04:17:47 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:04:17:53 -0400] "GET /wp-includes/assets/wp-login.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.219 - - [20/Oct/2025:04:17:54 -0400] "GET /wp-includes/content.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:04:17:55 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:17:55 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:17:55 -0400] "GET /wp-includes/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:17:55 -0400] "GET /wp-includes/css/gelay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:17:55 -0400] "GET /wp-includes/cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:17:55 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.202 - - [20/Oct/2025:04:18:28 -0400] "GET /wp-includes/css/themes.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:04:18:29 -0400] "GET /wp-includes/css/gelay.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:04:18:51 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:19:22 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:19:22 -0400] "GET /wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:19:22 -0400] "GET /wp-includes/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:19:22 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:19:22 -0400] "GET /wp-includes/fonts/iq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.251 - - [20/Oct/2025:04:19:46 -0400] "GET /wp-includes/default.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.218 - - [20/Oct/2025:04:19:47 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.201 - - [20/Oct/2025:04:19:56 -0400] "GET /wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.198 - - [20/Oct/2025:04:19:57 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.246 - - [20/Oct/2025:04:20:08 -0400] "GET /wp-includes/fonts/iq.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:21:01 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:21:01 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:21:01 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:21:01 -0400] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:21:01 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.215 - - [20/Oct/2025:04:21:23 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.212 - - [20/Oct/2025:04:21:33 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.198 - - [20/Oct/2025:04:21:34 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
203.2.64.59 - - [20/Oct/2025:04:21:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
149.154.161.196 - - [20/Oct/2025:04:22:29 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.197 - - [20/Oct/2025:04:22:30 -0400] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:22:35 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:22:35 -0400] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:22:35 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:22:35 -0400] "GET /wp-includes/IXR/index HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:22:35 -0400] "GET /wp-includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.214 - - [20/Oct/2025:04:23:20 -0400] "GET /wp-includes/IXR/index HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.250 - - [20/Oct/2025:04:23:23 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.253 - - [20/Oct/2025:04:23:24 -0400] "GET /wp-includes/inputs.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.233 - - [20/Oct/2025:04:23:33 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.219 - - [20/Oct/2025:04:23:34 -0400] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:24:18 -0400] "GET /wp-includes/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:18 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:18 -0400] "GET /wp-includes/l10n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:18 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:18 -0400] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:59 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:59 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:59 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:59 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:24:59 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.249 - - [20/Oct/2025:04:25:13 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.219 - - [20/Oct/2025:04:25:22 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.230 - - [20/Oct/2025:04:25:33 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.203 - - [20/Oct/2025:04:25:34 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.220 - - [20/Oct/2025:04:25:54 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:26:12 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:26:12 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:26:12 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:26:12 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:26:12 -0400] "GET /wp-includes/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.236 - - [20/Oct/2025:04:26:39 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.235 - - [20/Oct/2025:04:26:49 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.231 - - [20/Oct/2025:04:26:50 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:04:26:59 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:04:27:00 -0400] "GET /wp-includes/up.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:27:12 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:27:12 -0400] "GET /wp-includes/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:27:12 -0400] "GET /wp-includes/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:27:12 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:27:12 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.244 - - [20/Oct/2025:04:27:21 -0400] "GET /wp-includes/x.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.221 - - [20/Oct/2025:04:27:22 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.237 - - [20/Oct/2025:04:27:33 -0400] "GET /wp-includes/xmlrpc.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.246 - - [20/Oct/2025:04:27:34 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:04:27:43 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:28:05 -0400] "GET /wp-mails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:05 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:05 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:05 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:05 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.251 - - [20/Oct/2025:04:28:14 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:28:37 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:37 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:37 -0400] "GET /wp/wp-includes/fonts/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:37 -0400] "GET /wp/wp-includes/fonts/iqb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:28:37 -0400] "GET /wp1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:08 -0400] "GET /wso403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:08 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:08 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:08 -0400] "GET /wpindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:08 -0400] "GET /wsanon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:30 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:30 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:30 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:29:30 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.202 - - [20/Oct/2025:04:29:54 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.204 - - [20/Oct/2025:04:30:05 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.203 - - [20/Oct/2025:04:30:15 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.250 - - [20/Oct/2025:04:30:16 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:30:37 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:30:37 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:30:37 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:30:37 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
103.77.106.41 - - [20/Oct/2025:04:30:37 -0400] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.232 - - [20/Oct/2025:04:31:08 -0400] "GET /zero.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.215 - - [20/Oct/2025:04:31:15 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.213 - - [20/Oct/2025:04:31:16 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.232 - - [20/Oct/2025:04:31:18 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
149.154.161.248 - - [20/Oct/2025:04:31:30 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
103.77.106.41 - - [20/Oct/2025:04:31:35 -0400] "GET /zone.php?phpshell HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
149.154.161.198 - - [20/Oct/2025:04:31:51 -0400] "GET /zone.php?phpshell HTTP/1.1" 301 795 "-" "TelegramBot (like TwitterBot)"
89.248.172.183 - - [20/Oct/2025:05:11:05 -0400] "POST /wp-json/litespeed/v1/cdn_status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.3"