| Server IP : 162.214.74.102 / Your IP : 216.73.217.94 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././././././././././access-logs/ |
Upload File : |
162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/3WWGHMF12R5HFHRHWPK0PW2V5BEL-2TI HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/3T6A2MNI8U2FEK8BSHSZJ34LBXU-0FVF HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/FNQ-F0-GX853FB2G-07S335O9RCO1PY1 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/DOYJ5XKMSLWT0HTS-LR2UHSJINKJ0_SR HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/7YC2-9N7_U8FO18BE_S8E_3CZ3NLW6QU HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/X6XGK2CWKIGSNZUIWHW9G70MP_OM3HK8 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/GP11H3F1Z_ALHDX12YFQEL58GLIVIS0N HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:09:13:14 -0300] "GET /.well-known/acme-challenge/AW9G5UV0RK0NAH16XF_8QH83X10AC79K HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 207.46.13.231 - - [29/Jul/2026:09:44:23 -0300] "GET /robots.txt HTTP/1.1" 301 283 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 40.77.167.14 - - [29/Jul/2026:09:44:28 -0300] "GET / HTTP/1.1" 301 273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 5.253.84.92 - - [29/Jul/2026:09:52:05 -0300] "GET /wp-login.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/118.0.2" 5.253.84.92 - - [29/Jul/2026:09:52:06 -0300] "GET /administrator/ HTTP/1.1" 301 283 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1" 49.51.132.100 - - [29/Jul/2026:09:57:29 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.203.79.248 - - [29/Jul/2026:09:59:28 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.203.79.248 - - [29/Jul/2026:09:59:28 -0300] "GET /favicon.ico HTTP/1.1" 301 280 "http://lrsys.com.br/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 34.21.3.155 - - [29/Jul/2026:10:02:44 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 110.42.208.131 - - [29/Jul/2026:10:19:23 -0300] "GET / HTTP/1.1" 301 273 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.131.23.154 - - [29/Jul/2026:10:44:59 -0300] "GET / HTTP/1.1" 301 273 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.184.60.71 - - [29/Jul/2026:10:54:50 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 317 "-" "-" 65.110.40.167 - - [29/Jul/2026:10:56:20 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/JM3CLC3BNQVLCKD8D86KLHH4UQC0KW65 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/_39SFTRKVL6V6EGQU5QGQNSDE9FL8IK3 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/NEO08K0NZJ0LA3ZFC_CS8_R__3W0P3K4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/KB2W5J_PY1_79QCWNGKKQ8TGXVVSA0C2 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/6DSW9D5MX81LYUQ6XJR7VR4Y2INW21RW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/8FFQGUJ8O6AU5M4J74REO3ILXV6N2QIW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/O2BUPG5XDT-K4M7MKWVMG_-L_M9E_6-7 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:12:13:16 -0300] "GET /.well-known/acme-challenge/-P87FL4J9G2R83BOOB2WUZY9G1LBZ0OK HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 68.221.69.72 - - [29/Jul/2026:12:46:05 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 317 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:15 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 298 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:15 -0300] "GET //aa.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:15 -0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 284 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:16 -0300] "GET /media.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:16 -0300] "GET /images.php HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:16 -0300] "GET /gecko.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:17 -0300] "GET /82.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:17 -0300] "GET /xstelth.php HTTP/1.1" 301 280 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:19 -0300] "GET /xp.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:19 -0300] "GET ///admin.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:19 -0300] "GET /adminner.php HTTP/1.1" 301 281 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:20 -0300] "GET //a.php HTTP/1.1" 301 274 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:20 -0300] "GET /k.php HTTP/1.1" 301 274 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:20 -0300] "GET /aaa.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:23 -0300] "GET /222.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:23 -0300] "GET /test.php HTTP/1.1" 301 277 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:23 -0300] "GET /11.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:24 -0300] "GET /mac.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:25 -0300] "GET /wp-content/uploads/ HTTP/1.1" 301 288 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:26 -0300] "GET /wp-includes/Text/ HTTP/1.1" 301 286 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:26 -0300] "GET /dr.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:27 -0300] "GET /ops.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:27 -0300] "GET //wp-includes/assets/ HTTP/1.1" 301 288 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:27 -0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 296 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:28 -0300] "GET /.well-known/about.php HTTP/1.1" 301 290 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:29 -0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 294 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:29 -0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 307 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:30 -0300] "GET /wp-admin/css/colour.php HTTP/1.1" 301 292 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:30 -0300] "GET /8.php HTTP/1.1" 301 274 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:31 -0300] "GET /wp-content/admin.php HTTP/1.1" 301 289 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:31 -0300] "GET //f6.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:31 -0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 296 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:32 -0300] "GET /wp-blog.php HTTP/1.1" 301 280 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:32 -0300] "GET //cgi-bin/index.php HTTP/1.1" 301 286 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:32 -0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 286 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:33 -0300] "GET /wp-content/uploads/ HTTP/1.1" 301 288 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:33 -0300] "GET /f35.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:33 -0300] "GET /wp-load.php HTTP/1.1" 301 280 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:34 -0300] "GET /xyn.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:34 -0300] "GET /ccc.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:36 -0300] "GET /FWAZ.php HTTP/1.1" 301 277 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:36 -0300] "GET /file.php? HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:36 -0300] "GET /file.php HTTP/1.1" 301 277 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:37 -0300] "GET /ss.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:37 -0300] "GET /biufile.php HTTP/1.1" 301 280 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:37 -0300] "GET /coffexium.php HTTP/1.1" 301 282 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:38 -0300] "GET /als.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:38 -0300] "GET /simple.php HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:38 -0300] "GET /fpwch.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:39 -0300] "GET /info.php HTTP/1.1" 301 277 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:39 -0300] "GET /11.php?p= HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:40 -0300] "GET /dex.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:40 -0300] "GET /1.php HTTP/1.1" 301 274 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:41 -0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 296 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:41 -0300] "GET /config.json.php HTTP/1.1" 301 284 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:42 -0300] "GET /k2.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:42 -0300] "GET /for.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:43 -0300] "GET /raw.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:43 -0300] "GET //wp.php? HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:44 -0300] "GET /002.php?p= HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:44 -0300] "GET /fffm.php?p= HTTP/1.1" 301 280 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:44 -0300] "GET //johen.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:45 -0300] "GET /nwflm.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:45 -0300] "GET /111.php HTTP/1.1" 301 276 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:45 -0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 290 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:46 -0300] "GET /ws.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:46 -0300] "GET ///coffee.php HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:46 -0300] "GET /goods.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:47 -0300] "GET /about.php? HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:47 -0300] "GET /about.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:47 -0300] "GET /admin.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:48 -0300] "GET //themes.php HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:48 -0300] "GET /wefile.php HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:49 -0300] "GET /inputs.php? HTTP/1.1" 301 280 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:49 -0300] "GET /inputs.php HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:50 -0300] "GET //adminfuns.php HTTP/1.1" 301 282 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:50 -0300] "GET /ssixta.php HTTP/1.1" 301 279 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:50 -0300] "GET /hypo.php HTTP/1.1" 301 277 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:51 -0300] "GET /alfa.php HTTP/1.1" 301 277 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:51 -0300] "GET /xa.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:51 -0300] "GET //av.php HTTP/1.1" 301 275 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:52 -0300] "GET /bthil.php HTTP/1.1" 301 278 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:52 -0300] "GET /geforce.php HTTP/1.1" 301 280 "-" "-" 68.221.69.72 - - [29/Jul/2026:12:46:53 -0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 293 "-" "-" 43.172.198.207 - - [29/Jul/2026:13:22:06 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 51.68.107.149 - - [29/Jul/2026:13:24:42 -0300] "GET /robots.txt HTTP/1.1" 301 279 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.149 - - [29/Jul/2026:13:24:43 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 43.167.157.80 - - [29/Jul/2026:13:45:06 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.188.74 - - [29/Jul/2026:14:56:11 -0300] "GET / HTTP/1.1" 301 273 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.236.176.22 - - [29/Jul/2026:15:05:25 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/VYN1ERVC2QCD6UV_T5UXJR3S_2V08IWD HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/TPFX05DJNI1B2E3_OXCV6UOZD61OE8XU HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/TFBWX_2Q53MCX2YWKNXVHV_1TKR3EL8N HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/JF9GRRB384O2EOZJ7ZMBKKZAIUEWFE44 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/JDXVQIO198VBC79TPWE-LOCPE7N4Q3SI HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/WJ-YVVZZDSOP9JW63LB-Q_3U3S2FHDXH HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/M6BG7Y7FMDZKH34B63T27IQSJNEATASZ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:15:13:10 -0300] "GET /.well-known/acme-challenge/40T_K_XBZXG60KR0ZDEZQLWL91ZL_0K2 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 38.253.224.2 - - [29/Jul/2026:15:43:18 -0300] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 306 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:18 -0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 305 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:18 -0300] "GET /.tmb/wso.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:18 -0300] "GET /?loadme HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:18 -0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 305 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:20 -0300] "GET /.well-known/index.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:20 -0300] "GET /.well-known/content.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:20 -0300] "GET /.well-known/gelay.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:20 -0300] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:20 -0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:53 -0300] "GET /0.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:53 -0300] "GET /.wp-cache.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:53 -0300] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:53 -0300] "GET /.well-known/wp-signup.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:53 -0300] "GET /.well-knownold/index.php HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:56 -0300] "GET /10.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:56 -0300] "GET /0byte.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:56 -0300] "GET /1.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:56 -0300] "GET /01.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:43:56 -0300] "GET /00.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:44:41 -0300] "GET /5.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:44:41 -0300] "GET /500.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:44:41 -0300] "GET /404.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:44:41 -0300] "GET /406.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:44:41 -0300] "GET /403.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:15 -0300] "GET /6.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:15 -0300] "GET /7.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:15 -0300] "GET /8.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:15 -0300] "GET /777.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:15 -0300] "GET /666.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:19 -0300] "GET /admin.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:19 -0300] "GET /about.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:19 -0300] "GET /abc.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:19 -0300] "GET /a1.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:19 -0300] "GET /9.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:51 -0300] "GET /al.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:51 -0300] "GET /alf.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:51 -0300] "GET /administrator.php HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:51 -0300] "GET /alf4.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:51 -0300] "GET /alfa.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:53 -0300] "GET /alpha.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:53 -0300] "GET /anon.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:53 -0300] "GET /alwso.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:53 -0300] "GET /alfanew.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:45:53 -0300] "GET /alfa123.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:29 -0300] "GET /anonsec.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:29 -0300] "GET /anons79.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:29 -0300] "GET /atomlib.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:29 -0300] "GET /asd.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:29 -0300] "GET /assets/css/about.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:30 -0300] "GET /batm.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:30 -0300] "GET /base.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:30 -0300] "GET /bak.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:30 -0300] "GET /b.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:46:30 -0300] "GET /autoload_classmap.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /blog/wp-includes/fonts/dev.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /black.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /by.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /blog/wp-includes/fonts/iqb.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /byp.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /wp-includes/install.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 304 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /wp-content/install.php HTTP/1.1" 301 291 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:06 -0300] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 308 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:45 -0300] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:45 -0300] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:45 -0300] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:45 -0300] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:45 -0300] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:48 -0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:48 -0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:48 -0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:48 -0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:47:48 -0300] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:48:28 -0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:48:28 -0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:48:28 -0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:48:28 -0300] "GET /wp-content/IXR/index.php HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:48:28 -0300] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /byp7.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /bypass.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /byp403.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /bypas.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /byps.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /c.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /c99.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /cgi-bin/index.php HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:07 -0300] "GET /cgi.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:55 -0300] "GET /content.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:55 -0300] "GET /css.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:55 -0300] "GET /config.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:55 -0300] "GET /d.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:49:55 -0300] "GET /cong.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:50:35 -0300] "GET /error.php?phpshells HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:50:35 -0300] "GET /e.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:50:35 -0300] "GET /exploit.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:50:35 -0300] "GET /evil.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:50:35 -0300] "GET /eagle.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:17 -0300] "GET /fm1.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:17 -0300] "GET /filemanager.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:17 -0300] "GET /foxx.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:17 -0300] "GET /fm.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:17 -0300] "GET /flame.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:58 -0300] "GET /green.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:58 -0300] "GET /gelay.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:58 -0300] "GET /hello.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:58 -0300] "GET /haxor.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:51:58 -0300] "GET /h.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:52:37 -0300] "GET /images/inputs.php HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:52:37 -0300] "GET /index/function.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:52:37 -0300] "GET /info.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:52:37 -0300] "GET /indoxploit.php HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:52:37 -0300] "GET /init.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:17 -0300] "GET /inputs.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:17 -0300] "GET /iq.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:17 -0300] "GET /install.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:17 -0300] "GET /jindex.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:17 -0300] "GET /j.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:18 -0300] "GET /kk.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:18 -0300] "GET /kn.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:18 -0300] "GET /js.php?get HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:18 -0300] "GET /k.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:18 -0300] "GET /js.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:57 -0300] "GET /load.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:57 -0300] "GET /leaf.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:57 -0300] "GET /loader/ff.php?pass=shell HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:57 -0300] "GET /l.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:58 -0300] "GET /lf.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:58 -0300] "GET /login.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:58 -0300] "GET /lock.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:58 -0300] "GET /lock360.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:58 -0300] "GET /log.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:53:58 -0300] "GET /local.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:54:50 -0300] "GET /mari.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:54:50 -0300] "GET /marijuana.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:54:50 -0300] "GET /mail.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:54:50 -0300] "GET /mar.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:54:50 -0300] "GET /manager.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:55:25 -0300] "GET /new-index.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:55:25 -0300] "GET /n.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:55:25 -0300] "GET /mrjn.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:55:25 -0300] "GET /minishell.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:55:25 -0300] "GET /new.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:04 -0300] "GET /p.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:04 -0300] "GET /priv.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:04 -0300] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:04 -0300] "GET /pi.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:04 -0300] "GET /priv8.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /radio.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /r00t.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /q.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /qindex.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /r.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /rss.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /root.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /radio.php?pass=shell HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /raw.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:05 -0300] "GET /readme.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /shx.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /shl.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /s.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /seo.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /send.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /sym403.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /Sym.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /simple.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /style.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /sym.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /test.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /tes.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /symlink.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /sys.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:06 -0300] "GET /t.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /upfile.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /up.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /tinyfilemanager.php HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /unknown.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /u.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /ups.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /uploads.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /upload.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /upgrade.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:07 -0300] "GET /uploader.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /wp_cron.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /w.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /usr.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /vuln.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /v.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /wp-activate.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /wp-access.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /wp-.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /wp_wrong_datlib.php HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:08 -0300] "GET /wp-about.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/dropdown.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/about.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/alfa.php HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/admin.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/index.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 296 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/fw.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:09 -0300] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/radio.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/plugins.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/inputs.php HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/install.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/wso.php HTTP/1.1" 301 285 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/themes.php HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/upload.php HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:10 -0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-config.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-config-sample.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-blog-header.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-atom.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-conctent.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-content/flame.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-content/admin.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-conflg.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-content/about.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-content.php HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:11 -0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/inputs.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/fw.php HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/function.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/index.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 296 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/radio.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/plugins/inputs.php HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/wso.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/uploads/inputs.php HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 296 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/themes/inputs.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:12 -0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-includes.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-files.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-content/xleet.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-cron.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-defaul.php HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-includes/content.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 303 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-includes/assets/wp-login.php HTTP/1.1" 301 300 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:13 -0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/css/themes.php HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/cron.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/css/gelay.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/fonts/iq.php HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/fonts/dev.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/default.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 300 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:14 -0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 296 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 300 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/fonts/iqb.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/fw.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/index.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/IXR/index HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:15 -0300] "GET /wp-includes/inputs.php HTTP/1.1" 301 291 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/l10n.php HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/library.php HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 300 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/radio.php HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:16 -0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/upload.php HTTP/1.1" 301 291 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/themes.php HTTP/1.1" 301 291 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/up.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/xmlrpc.php HTTP/1.1" 301 291 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/x.php HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/wp-login.php HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-trackback.php HTTP/1.1" 301 285 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-mails.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-login.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-load.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:17 -0300] "GET /wp-mail.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wp1.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wp/wp-includes/fonts/iqb.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wp-wso.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wp/wp-includes/fonts/dev.php HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wp.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /x.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wso403.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wpindex.php HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wsanon.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:18 -0300] "GET /wso.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /xmrlpc.php?p= HTTP/1.1" 301 282 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /xmrlpc.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /xleet-shell.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /xleet.php HTTP/1.1" 301 278 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /xmlrpc.php HTTP/1.1" 301 279 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /zero.php HTTP/1.1" 301 277 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /z.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /xx.php HTTP/1.1" 301 275 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /xxx.php HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:19 -0300] "GET /y.php HTTP/1.1" 301 274 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 38.253.224.2 - - [29/Jul/2026:15:56:20 -0300] "GET /zone.php?phpshell HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 175.27.163.171 - - [29/Jul/2026:16:38:22 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.71.142.176 - - [29/Jul/2026:16:56:11 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 4.185.41.66 - - [29/Jul/2026:17:22:20 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 322 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:21 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 303 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:21 -0300] "GET //aa.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:22 -0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 289 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:22 -0300] "GET /media.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:22 -0300] "GET /images.php HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:23 -0300] "GET /gecko.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:23 -0300] "GET /82.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:23 -0300] "GET /xstelth.php HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:24 -0300] "GET /xp.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:24 -0300] "GET ///admin.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:24 -0300] "GET /adminner.php HTTP/1.1" 301 286 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:25 -0300] "GET //a.php HTTP/1.1" 301 279 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:25 -0300] "GET /k.php HTTP/1.1" 301 279 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:26 -0300] "GET /aaa.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:26 -0300] "GET /222.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:27 -0300] "GET /test.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:27 -0300] "GET /11.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:27 -0300] "GET /mac.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:28 -0300] "GET /wp-content/uploads/ HTTP/1.1" 301 293 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:28 -0300] "GET /wp-includes/Text/ HTTP/1.1" 301 291 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:28 -0300] "GET /dr.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:28 -0300] "GET /ops.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:29 -0300] "GET //wp-includes/assets/ HTTP/1.1" 301 293 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:29 -0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 301 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:29 -0300] "GET /.well-known/about.php HTTP/1.1" 301 295 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:30 -0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 299 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:30 -0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 312 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:30 -0300] "GET /wp-admin/css/colour.php HTTP/1.1" 301 297 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:31 -0300] "GET /8.php HTTP/1.1" 301 279 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:31 -0300] "GET /wp-content/admin.php HTTP/1.1" 301 294 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:31 -0300] "GET //f6.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:32 -0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 301 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:32 -0300] "GET /wp-blog.php HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:32 -0300] "GET //cgi-bin/index.php HTTP/1.1" 301 291 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:33 -0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 291 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:33 -0300] "GET /wp-content/uploads/ HTTP/1.1" 301 293 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:33 -0300] "GET /f35.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:33 -0300] "GET /wp-load.php HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:34 -0300] "GET /xyn.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:34 -0300] "GET /ccc.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:34 -0300] "GET /FWAZ.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:35 -0300] "GET /file.php? HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:35 -0300] "GET /file.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:35 -0300] "GET /ss.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:36 -0300] "GET /biufile.php HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:36 -0300] "GET /coffexium.php HTTP/1.1" 301 287 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:36 -0300] "GET /als.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:37 -0300] "GET /simple.php HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:37 -0300] "GET /fpwch.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:37 -0300] "GET /info.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:38 -0300] "GET /11.php?p= HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:38 -0300] "GET /dex.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:38 -0300] "GET /1.php HTTP/1.1" 301 279 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:38 -0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 301 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:39 -0300] "GET /config.json.php HTTP/1.1" 301 289 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:39 -0300] "GET /k2.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:39 -0300] "GET /for.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:40 -0300] "GET /raw.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:40 -0300] "GET //wp.php? HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:40 -0300] "GET /002.php?p= HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:41 -0300] "GET /fffm.php?p= HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:41 -0300] "GET //johen.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:41 -0300] "GET /nwflm.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:42 -0300] "GET /111.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:42 -0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 295 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:42 -0300] "GET /ws.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:43 -0300] "GET ///coffee.php HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:43 -0300] "GET /goods.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:43 -0300] "GET /about.php? HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:43 -0300] "GET /about.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:44 -0300] "GET /admin.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:44 -0300] "GET //themes.php HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:44 -0300] "GET /wefile.php HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:45 -0300] "GET /inputs.php? HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:45 -0300] "GET /inputs.php HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:45 -0300] "GET //adminfuns.php HTTP/1.1" 301 287 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:46 -0300] "GET /ssixta.php HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:46 -0300] "GET /hypo.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:46 -0300] "GET /404.php?p= HTTP/1.1" 301 284 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:47 -0300] "GET /reviall.php HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:47 -0300] "GET /xxx.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:47 -0300] "GET /yj09.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:48 -0300] "GET /alfa.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:48 -0300] "GET /xa.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:48 -0300] "GET //av.php HTTP/1.1" 301 280 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:49 -0300] "GET /bthil.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:49 -0300] "GET /geforce.php HTTP/1.1" 301 285 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:50 -0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 298 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:50 -0300] "GET /mlqeheok.php HTTP/1.1" 301 286 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:50 -0300] "GET /sh3ll.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:50 -0300] "GET /pbck.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:51 -0300] "GET ///s_w.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:52 -0300] "GET ///s_p.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:52 -0300] "GET ///s_y.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:52 -0300] "GET ///2larp.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:53 -0300] "GET ///term.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:53 -0300] "GET /000.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:54 -0300] "GET ///Jcrop.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:54 -0300] "GET /234ff.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:54 -0300] "GET /Zoo.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:55 -0300] "GET ///133.php HTTP/1.1" 301 281 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:57 -0300] "GET /alls.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:58 -0300] "GET /wp-ws68.php?p= HTTP/1.1" 301 288 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:59 -0300] "GET /w3lls.php HTTP/1.1" 301 283 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:59 -0300] "GET /mgrr.php HTTP/1.1" 301 282 "-" "-" 4.185.41.66 - - [29/Jul/2026:17:22:59 -0300] "GET /pucci.php HTTP/1.1" 301 283 "-" "-" 34.0.61.43 - - [29/Jul/2026:17:45:24 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BuiltWith/1.4; rb.gy/xprgqj) Chrome/124.0.0.0 Safari/537.36" 162.214.74.102 - - [29/Jul/2026:18:13:10 -0300] "GET /.well-known/acme-challenge/QEATNSKK7QC0-D0C2I5QE8W55WH54OHT HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:18:13:10 -0300] "GET /.well-known/acme-challenge/CG08WNEUT9WP398XM_PBSOG9OQ1HJ4RY HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:18:13:10 -0300] "GET /.well-known/acme-challenge/DDHEGXDROT5K5D2_CAWRTRWKC_6QWU-V HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:18:13:10 -0300] "GET /.well-known/acme-challenge/2044F6_-B4VWNWXEXSDPQLMAZ45DFJ94 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:18:13:10 -0300] "GET /.well-known/acme-challenge/RV6YVBJM956YH1_6NHRR-CBT69I_ESON HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:18:13:10 -0300] "GET /.well-known/acme-challenge/1JG87LD1HA7_I0K1RO8-SNEYOZYRB37B HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:18:13:10 -0300] "GET /.well-known/acme-challenge/SI1YK3WQI5TBOC8O78JXPCXN2CYLUDI5 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 162.214.74.102 - - [29/Jul/2026:18:13:11 -0300] "GET /.well-known/acme-challenge/5QUHIJQ4O33Q06RNE4AOTXGMEM-XV0WV HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 146.70.194.238 - - [29/Jul/2026:19:14:22 -0300] "GET / HTTP/1.1" 301 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"